Analysis
- user interaction
yes - max time kernel
6s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
31/07/2026, 14:59
Behavioral task
behavioral1
Sample
Login Tool Key.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target Login Tool Key.exe
- Size 356KB
- Sample260731-sc615sam2w
- SHA256 7f3ddbd46c70f1b9a0bfb55604757ee8ef28acbd9be9ab74304ec4ace5fcc767
- MD5 a5b280552e1f2b8f451a831c7324f9d4
- SHA1 c8cca3496f4647783cc9fa54f8fcea2faa97c459
- SHA512 b024ce1a0c180e8643b0342ff36ef6e41bf4cd3472df6b49a795ca8d25c54ac5e20068d0b6ee1a85eec4a3e8557ffbc629f202757174e965165047425fc8c6da
- SSDEEP 6144:v+7Kongduzpzw2ngkdlDRGnHlJGimSZQsLvikhN8Ftqj9dhZSXU8/L/uLB:27zngwEKLDRCD3bfDr8/qSXUC6LB
- TLSH T1C374236906469634E79ED8310FB7CE4CE5804E67638B07EFCD9118BB8FAE1490C92D76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1656-0-0x00007FF799DD0000-0x00007FF79A070000-memory.dmp upx behavioral1/memory/1656-2-0x00007FF799DD0000-0x00007FF79A070000-memory.dmp upx - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeShutdownPrivilege 1656 Login Tool Key.exe