Analysis

  • max time kernel
    150s
  • max time network
    118s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/07/2026, 00:21

General

  • Target
    ControlG.exe
  • Size 42.0MB
  • Sample260728-antabavydy
  • SHA256 3b70f117d5c6011212b9786ebfc98ddbc40e748e88d7d9006d91fa17b7669b72
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ControlG.exe
    "C:\Users\Admin\AppData\Local\Temp\ControlG.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:4360

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        av_libglesv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ControlG\w7HnHDyHEDwb\av_libglesv2.dll
        • Size 4.2MB
        • SHA256 caff1be1faee32f7c5bfba9162ee617c347aad40772caa9a1aff794e3a191420
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libHarfBuzzSharp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ControlG\w7HnHDyHEDwb\libHarfBuzzSharp.dll
        • Size 1.5MB
        • SHA256 ef5923ef4cdc8612c1825b294174b5b8cc8a056ed0f06b58db56aabc56aaae12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libSkiaSharp.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ControlG\w7HnHDyHEDwb\libSkiaSharp.dll
        • Size 9.0MB
        • SHA256 2ca940b7c4621ecd27d2f07c5f46fafa0375f493692cd4e6e1e66c07fbc8109a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4360-35-0x000001DB12230000-0x000001DB122C0000-memory.dmp

        memory/4360-43-0x000001DB03330000-0x000001DB03340000-memory.dmp

        memory/4360-23-0x000001DB12020000-0x000001DB12040000-memory.dmp

        memory/4360-27-0x000001DB12060000-0x000001DB12080000-memory.dmp

        memory/4360-31-0x000001DB12110000-0x000001DB12150000-memory.dmp

        memory/4360-3-0x000001DB10D10000-0x000001DB119A0000-memory.dmp

        memory/4360-19-0x000001DB0FF60000-0x000001DB0FF80000-memory.dmp

        memory/4360-12-0x000001DB11AF0000-0x000001DB11B40000-memory.dmp

        memory/4360-16-0x000001DB11F80000-0x000001DB11FC0000-memory.dmp

        memory/4360-50-0x000001DB06060000-0x000001DB06120000-memory.dmp

        memory/4360-53-0x000001DB05F70000-0x000001DB05FA0000-memory.dmp

        memory/4360-57-0x000001DB06470000-0x000001DB065E0000-memory.dmp

        memory/4360-61-0x000001DB05F40000-0x000001DB05F60000-memory.dmp

        memory/4360-7-0x000001DB0F990000-0x000001DB0F9B0000-memory.dmp