Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/07/2026, 12:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Immortal Private.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Immortal Private.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target Immortal Private.exe
- Size 1.7MB
- Sample260727-pkwctsem4z
- SHA256 4099b742e87e63cb6a5a6fcf46f1ef2faad7b7903dbeb00485a4ba497ee2faa2
- MD5 4b37adf63580806b913acb8f233b23dd
- SHA1 786650b1f97b771e392b756f104064857b704938
- SHA512 0b0bdc27d533f7025970c968a1f8ef55387287c60d5a27a060a1d08e59b713d2c9b7fa70e61bf9597b010b3d5c683eb697b3604c28152b4fef4f59680b8d1fa8
- SSDEEP 49152:n/vy9B+q6bOaITD/evHad9lBzuz7VjfnNyw:/a9aerlBzU
- TLSH T19685E147B7ED41FDD0AB9138D9466A0BEA76340907604ADF13E046AA2FA33E05F7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 22 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 23 raw.githubusercontent.com 27 raw.githubusercontent.com 33 raw.githubusercontent.com 34 raw.githubusercontent.com 26 raw.githubusercontent.com 3 raw.githubusercontent.com 9 raw.githubusercontent.com 19 raw.githubusercontent.com 20 raw.githubusercontent.com 31 raw.githubusercontent.com 1 raw.githubusercontent.com 8 raw.githubusercontent.com 18 raw.githubusercontent.com 30 raw.githubusercontent.com 24 raw.githubusercontent.com 13 raw.githubusercontent.com 14 raw.githubusercontent.com 15 raw.githubusercontent.com 16 raw.githubusercontent.com 28 raw.githubusercontent.com 29 raw.githubusercontent.com 32 raw.githubusercontent.com - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3308 Immortal Private.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3308 Immortal Private.exe