Overview
overview
3Static
static
3EMUV61.zip
windows11-21h2-x64
1EMUV61.zip
windows11-ltsc_2024-x64
1EMUV7/EMU.exe
windows11-21h2-x64
1EMUV7/EMU.exe
windows11-ltsc_2024-x64
1EMUV7/inst...on.exe
windows11-21h2-x64
3EMUV7/inst...on.exe
windows11-ltsc_2024-x64
3EMUV7/inte...on.dll
windows11-21h2-x64
1EMUV7/inte...on.dll
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
40s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
30/07/2026, 21:56
Static task
static1
Behavioral task
behavioral1
Sample
EMUV61.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
EMUV61.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
EMUV7/EMU.exe
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
EMUV7/EMU.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
EMUV7/install-interception.exe
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
EMUV7/install-interception.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
EMUV7/interception.dll
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
EMUV7/interception.dll
Resource
win11ltsc2024-20260709-en
General
- Target EMUV7/EMU.exe
- Size 15.8MB
- Sample260730-1tpgesgc22
- SHA256 b79199faa6b6cf9e28c22f97228ce7f76c5c5869bf02c3b54567916682ff023a
- MD5 e2a8904afb1a1406f287af9089c6242b
- SHA1 3f636d50852e7da1e7bd0bfd91a8599c56eea9b7
- SHA512 0e4a02438486db6382221c66b7db9817cbb65d254a9f593f49a8084a2aa692879d3e8a95c633f282a35982e9055ac9d32f4994f24caf90bee689f3342a347295
- SSDEEP 98304:OaFlUF1ywR+RQQ0R673L2SDKlCnoAYi8wtti1wyZKyQauUN4jiCp/Ei2vjUuR6J8:s2QrKdu4jiCp/h2DRotsuqesaszL0
- TLSH T15EF67D02BE9A58EDD059C87483464BA79E2634CF0A35B9FF46C901292F7EBB45F1C319
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4012 EMU.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4012 EMU.exe