Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 15:53
Behavioral task
behavioral1
Sample
d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe
- Size 7.1MB
- Sample260731-tb4easch88
- SHA256 d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19
- MD5 835a6966931ece626afc2f91d3334369
- SHA1 4203b57972c08199df8f21dd9cc7f8478d80ae44
- SHA512 4c70619a16a8f8f88430c64712df64abb3d4cd9dd5e1559e2283695938f731aeacb89b2313dced99d2c92b7926f0c4f1aab33e770398c5678b1b936040d6d7f0
- SSDEEP 49152:zJd0pvVBtdVmfGfY0THVMRjnoPxmJqOfXPAakbbm5A1UKjT5aL/83jrrdxiJKVKm:zJYdTgNfOmOW8tipOF/TEC
- TLSH T16E764A17EC6514E9C1AE923589729513BF717C890B3023D32BA0F6283F76BD06EB9794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsService = "C:\\Users\\Admin\\AppData\\Local\\Temp\\d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe" d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsService = "C:\\Users\\Admin\\AppData\\Local\\Temp\\d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe" d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe"C:\Users\Admin\AppData\Local\Temp\d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe"1⤵
- Adds Run key to start application
PID:6136
-
C:\Users\Admin\AppData\Local\Temp\d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exeC:\Users\Admin\AppData\Local\Temp\d5b92c9f6ff094cc2689495adfb3ce420fffa9ad9abfb64fdbdd45c3693c5c19.exe1⤵
- Adds Run key to start application
PID:4964
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\grob_client.log
- Size 566B
- SHA256 392e3f796ec0d26f00064dbc3eeb3dc0b0a64f77be911bcf9d7df0ff74ff141c
- MD5 7cfa7561ccfb882fef31979764239d65
- SHA1 d9dd9029cb4c41aea3dcba8220215d8295a6c448
- SHA512 7809aa4f05f06ef03abda0cc98c7af5b9893820564ce14b3e6d8ff86ad4ef234d45a8ba49004b2ca3d712795906498242819ec507f88c31de1bc5a5efbf6d7c4
- TLSH T15AF02B893239A97DCFCA4D05985582324AD3B0633788144EBFB148AC0E06ECD8BBE49D
- MD5 SHA1 SHA512 TLSH