Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 17:34
Behavioral task
behavioral1
Sample
DecoyRequest.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
DecoyRequest.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target DecoyRequest.exe
- Size 2.5MB
- Sample260728-v5fe1asybx
- SHA256 3f5faf0efb3ed952ca7e0d4f65e986a97eda8542c9a3758ba24065321adad692
- MD5 d4c12150f211d66276484f9af57bf0cf
- SHA1 4ec4943ef64747bf49bbb95e2bb75cd3192b4523
- SHA512 d8692864bed2b020cc932c21056f0ad1f2d3390cdb27644934de5e1df3afd424aa5feda8b790d72294d374a8b97693bc13f08296c093c4a2014842f80451a387
- SSDEEP 49152:NLjq/dlOM7qMjRnBJ/MzV47Zb/9BPABYVA77/RFkqXfd+/9AQBDjLAan/3/DR:N+dGMjRT/eV4dkTkqXf0FpLAWT
- TLSH T134C533D033B4586BE2AF65FCA63E50038737273385A5EBDC89E921DD097A78A0315B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3480 DecoyRequest.exe - Suspicious behavior: RenamesItself 1 IoCs
pid Process 3480 DecoyRequest.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3480 DecoyRequest.exe