Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/07/2026, 20:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
appstep.58680017.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
appstep.58680017.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
General
- Target appstep.58680017.exe
- Size 54.3MB
- Sample260721-yrdwsstdke
- SHA256 d9d1fd13da14290fa7c921ee4aca37f2efd4e0403005b6bc2a7e5dc12ee70124
- MD5 5097818125ba6eaac331a2e1e87953e5
- SHA1 61bda6180417df75a292c677cc769fe5c499fb2b
- SHA512 a1e43f68b5f2b635fc20e9be741e5c62bff78d96e17f7852fa4e880fff1c2bfec0559ed2c53dbfb51bf1ce5c2b1df7a2f35f31a7d2269e7f56316b3155825be3
- SSDEEP 98304:Ru19nmtLsx4qV5+uY2cQysL8kxEVv4vu7PErGCrC9ILrFMKQMYpTTDliJW9PgAd:AnnmtLsX5+um3nkSVveZYzvsyPgAd
- TLSH T10BC7F90676028DCAE06692B4145BBF91E3B9FD714AF1D36723F6272D1FEA34C4AA3144
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4696 appstep.58680017.exe 4696 appstep.58680017.exe 4696 appstep.58680017.exe 4696 appstep.58680017.exe 4696 appstep.58680017.exe 4696 appstep.58680017.exe