Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/07/2026, 14:32
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
shadowfax.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
shadowfax.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target shadowfax.exe
- Size 9.1MB
- Sample260728-rwbtnsbk31
- SHA256 009b7bf6ff208125b7b0a3ce9258bb08649588d83285b5f48d36e30935d84a67
- MD5 637e3e48a1ba92dc7897a5270cdb0d3e
- SHA1 5006b0970384023dfc6749ef3460a60b603d3ab4
- SHA512 3784aee968dea4717d40753fdcc1e1653fc0b6c2edcc562eee4e31561d252e8c5ea9979d0ddc97a2ec574deacb56519ebaea8576099b157d59ba8fc345ea45fd
- SSDEEP 98304:oxmMnqdhq10n81liA03tpiiHButCcw9+mMNC1CNOCB65hWs5K4pBWED:CmQWjcYceCNOCi
- TLSH T14DA64A57A4EB0CEDCD96A3B481CB6336B734FD7046652F3B6A04D6701E13AC06E6AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Users\Admin\3D Objects\desktop.ini shadowfax.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\debug.log
- Size 377B
- SHA256 d2407f2d6a709d2b7e17938f6fe4dc4043ff582b834503e3f692811a85c1ba7e
- MD5 2cfb95c6a15508e3bedd7bb6b8a77055
- SHA1 caa4f6ef36963aaa7358554f827664143a1b500c
- SHA512 44e46845436756ac88236df9963dc2c95f949fe2d4dd0d8010e4397ac1c3bdcc77832ab4bffa5a3e26bd7fffe08061f385457883d2a454b83d4c679e15292e4f
- TLSH T107E0D8612D88D59BD7DA015BBB30A930CA96C74D0F4B121959096C183AA02D1C3E2961
- MD5 SHA1 SHA512 TLSH