f936301945c1a69018d1ca8c55b951ecbf2ae7f5364f48e7c9df92fc021c1e6d

Login
Reports

Overview

overview

Static

static

Potassium....pet.js

windows11-21h2-x64

WebView2Loader.dll

windows11-21h2-x64

autoexec.lnk

windows11-21h2-x64

bin/Decompiler.exe

windows11-21h2-x64

bin/Potassium.dll

windows11-21h2-x64

bin/Potassium.exe

windows11-21h2-x64

bin/monaco/index.html

windows11-21h2-x64

bin/monaco...ain.js

windows11-21h2-x64

bin/monaco...tes.js

windows11-21h2-x64

bin/monaco...ase.js

windows11-21h2-x64

bin/monaco...ses.js

windows11-21h2-x64

bin/monaco...del.js

windows11-21h2-x64

bin/monaco...num.js

windows11-21h2-x64

bin/monaco...tem.js

windows11-21h2-x64

bin/monaco...ums.js

windows11-21h2-x64

bin/monaco...nce.js

windows11-21h2-x64

bin/monaco...del.js

windows11-21h2-x64

bin/monaco...nal.js

windows11-21h2-x64

bin/monaco...der.js

windows11-21h2-x64

bin/monaco...ace.js

windows11-21h2-x64

bin/monaco...-pd.js

windows11-21h2-x64

bin/monaco...ons.js

windows11-21h2-x64

bin/monaco...als.js

windows11-21h2-x64

bin/monaco...rds.js

windows11-21h2-x64

bin/monaco...ing.js

windows11-21h2-x64

bin/monaco...ypt.js

windows11-21h2-x64

bin/monaco...bug.js

windows11-21h2-x64

bin/monaco...ath.js

windows11-21h2-x64

bin/monaco.../os.js

windows11-21h2-x64

bin/monaco...oth.js

windows11-21h2-x64

bin/monaco...net.js

windows11-21h2-x64

bin/monaco...gex.js

windows11-21h2-x64

Analysis

max time kernel
598s
max time network
469s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/07/2026, 11:48

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Potassium.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.84/adblock_snippet.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral2

Sample

WebView2Loader.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

autoexec.lnk

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

600 seconds

execution

Behavioral task

behavioral4

Sample

bin/Decompiler.exe

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral5

Sample

bin/Potassium.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

bin/Potassium.exe

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

600 seconds

Behavioral task

behavioral7

Sample

bin/monaco/index.html

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

600 seconds

discovery

Behavioral task

behavioral8

Sample

bin/monaco/vs/base/worker/workerMain.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral9

Sample

bin/monaco/vs/basic-languages/lua/autocompletes.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral10

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/base.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral11

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral12

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral13

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral14

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral15

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral16

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral17

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/Model.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral18

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral19

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral20

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral21

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/functions-pd.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral22

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/functions.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral23

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/globals.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral24

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/keywords.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral25

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral26

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/crypt.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral27

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral28

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/math.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral29

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/os.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral30

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/oth.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral31

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/raknet.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral32

Sample

bin/monaco/vs/basic-languages/lua/autocompletes/libraries/regex.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

600 seconds

execution

Report Analysis Logs

General

Target
bin/Potassium.exe
Size 14.2MB
Sample260729-nyhs8avwhy
SHA256 f936301945c1a69018d1ca8c55b951ecbf2ae7f5364f48e7c9df92fc021c1e6d
MD5 d5ecb126140fa73feeecbb849cbf2eec
SHA1 fd1b3ce45cfa3cf26b66e9f888d54b736bfff1b7
SHA512 03386f1f05b3d126d0386a8de236a2eb2218860b696991b82c3f4005201fd459c1a85681476587f76ed2da9d2414bde021649c2969456107207e5046709e2718
SSDEEP 393216:d2v4vMYCvBi3X6bubfqlbQfsruxIBhquFJ:kJbs6SrYQfFCBhquF
TLSH
T1B0E623E644C422E4D9D78F54A2491BCEB0E2F06949BDBD2D3AC21C824B35FE7854DE63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1196	Potassium.exe
1196	Potassium.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1196	Potassium.exe
1196	Potassium.exe
1196	Potassium.exe
1196	Potassium.exe

Processes

C:\Users\Admin\AppData\Local\Temp\bin\Potassium.exe
"C:\Users\Admin\AppData\Local\Temp\bin\Potassium.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:1196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1196-0-0x00007FF74EFB8000-0x00007FF74F83B000-memory.dmp

Download

memory/1196-2-0x00007FF74EF60000-0x00007FF750674000-memory.dmp

Download

memory/1196-1-0x00007FFAE10F0000-0x00007FFAE10F2000-memory.dmp

Download

memory/1196-5-0x00007FF74EFB8000-0x00007FF74F83B000-memory.dmp

Download