Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 05:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Security.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Security.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target Security.exe
- Size 1.6MB
- Sample260730-fx73qazglb
- SHA256 bf6a6b5779e36e637299043323309d1df13faf32725c8017ddf5010f146757e3
- MD5 71046a135a167f91019a4a6a797ce2aa
- SHA1 0b9bfdd72e50fdb08c602a99f7c7fe7c0a86a6f5
- SHA512 86ca4d7cfcd1df068cfe652febf2f34e42be8ca9f86bbcda76afd8aa4ac77eb78897b4cfccf3735a869106fd444b708057e9e0ea7611949553caf74f446fe369
- SSDEEP 49152:72EYTb8atv1orq+pEiSDTj1VyvBaQlV+MacK51:qXbIrq4EIm
- TLSH T19885BF85A39441DCFEABDA76C523CD16C2B37C4A1976E51F0498BA722F332E2153E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 6 3748 Security.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3748 Security.exe 3748 Security.exe 3748 Security.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 3748 Security.exe 3748 Security.exe 3748 Security.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Admin\QuanumAccess.log
- Size 173B
- SHA256 e27e22c095c4bed9e471c6feb0a00d01a935e803c0c6a6071c4954b78b5aeaa9
- MD5 a5578c1aef7398630499b1fed74f4b5f
- SHA1 7e9e2805d2e40eae9bfbb3d155a75583caa05365
- SHA512 6bc52728e31c91531cfb569ed716ea27f4874a7f63e6e9a516019dca7634f2be26cc214b293fc45f4b0a906810822124a986ac7c695099f8205d5c4046630691
- TLSH T156C08C443A030CEC11B008470A4C82F1C524622FBE1AE00D361E303AA30CBE42536C66
- MD5 SHA1 SHA512 TLSH