Analysis
- max time kernel
149s - max time network
121s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/07/2026, 00:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fang.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fang.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target Fang.exe
- Size 1.4MB
- Sample260727-aetvgseq8v
- SHA256 5121edd04cd69312a286312e081021e80ec5f2edda57b8a097a817d922fa41f0
- MD5 152d20dcdf996acf28509d82f1818fec
- SHA1 324f0d919db00d0e2fc27f2e191763b2ba57b5b1
- SHA512 a51cea564ff6bd1af2a38c779a34868da0e650c8cdaed5c4d1cf619c7276af263cd762553f01934c4f7e472d2f939f7acbbbfd33443b1fa6898772ed96c12448
- SSDEEP 24576:Mpb2bF6uz4p6PJqI5Hd83vFSC8c8acI0af1au9qEeZyiJnzYqIcLOk1nqMJbUsxS:Mpb2BaIhHd83Ikqawu90JnzYqZLOkNND
- TLSH T1C265BF42A2F682ECC1ABD078C246A71BEB31740903205BEB67D45F596F93EE15F7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1856 Fang.exe 1856 Fang.exe 1856 Fang.exe 1856 Fang.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1856 Fang.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1856 Fang.exe