3b4c7d81913869d57ea2b4227807635cecd5c34afa168a868b2e2d27b666f477

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3b4c7d81913869d57ea2b4227807635cecd5c34afa168a868b2e2d27b666f477.exe
Size 1.3MB
Sample260729-e2g7esea47
SHA256 3b4c7d81913869d57ea2b4227807635cecd5c34afa168a868b2e2d27b666f477
MD5 fa37e1fa5715d47ca065e36b75907d4e
SHA1 4089ef23b61ece6370de1161b99b46adc989dc8b
SHA512 cdbd61b432c38b6a993edfdf82d84ea283ee63d45c1cc9b4156c005cc7665c2139931ee793eeb11bb0696f7d906ac196bcc64038842edd95a421a5371a5857d3
SSDEEP 12288:hYSocePlfVOG1nUq/ZxNq2mhrEycSK3kKNQ8JcbQAcngzb9UtYSE:hYTPR1nUq/ZKhrQSK3kwQGdgzbIYB
TLSH
T13355C58076ED5897F6A3833918F2D3213679BC526722CF0F9200992C4D767C3BEA5B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3704	3b4c7d81913869d57ea2b4227807635cecd5c34afa168a868b2e2d27b666f477.exe

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\3b4c7d81913869d57ea2b4227807635cecd5c34afa168a868b2e2d27b666f477.exe
"C:\Users\Admin\AppData\Local\Temp\3b4c7d81913869d57ea2b4227807635cecd5c34afa168a868b2e2d27b666f477.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3704-0-0x00007FF7FF6D0000-0x00007FF7FF73A000-memory.dmp

Download