Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 15:53
Behavioral task
behavioral1
Sample
1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe
- Size 7.1MB
- Sample260731-tbvgdsch76
- SHA256 1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6
- MD5 53cf0d225a004936ea9115d7dd87d6a7
- SHA1 10c66b1bcb3a1c152af17b1153c9a195387db527
- SHA512 dd2dab0dd33affaa173469632ac330b19a502a64124251a87dbcac90f5a2758a8d3eb911ce3c4b6b9188f773124581eb1b4d2fc5e2a08f47decebf0a1c3caf4e
- SSDEEP 49152:/aO7770R9XeeaxpWVQ6esI75goBYMDj4w7EuWKIifEcqsbzVPa61qAt5tYjm1Od6:/ae3GtjNi0svVSiXziQsE
- TLSH T137765903ECA514E8C0ADD1758A639253BF617C494B3163D72B90F6243F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsService = "C:\\Users\\Admin\\AppData\\Local\\Temp\\1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe" 1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe Set value (str) \REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsService = "C:\\Users\\Admin\\AppData\\Local\\Temp\\1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe" 1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe"C:\Users\Admin\AppData\Local\Temp\1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe"1⤵
- Adds Run key to start application
PID:4952
-
C:\Users\Admin\AppData\Local\Temp\1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exeC:\Users\Admin\AppData\Local\Temp\1fb963d00cbe3443e8f0fb8367f0a8727b62243df878e47a4f25bf99c8310ac6.exe1⤵
- Adds Run key to start application
PID:1384
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\grob_client.log
- Size 566B
- SHA256 dfafecc102fc08c8642743e8ecf06ea4b8680f94d34847d7d58f6dbc05c77953
- MD5 bcdcd1deb220b431de53d3e6d63e71b3
- SHA1 46f7ba72364157ae02551af58889ccd721d40eb3
- SHA512 31196a4879a3ef108e05f6006ab27ac0b0ba163b425b8a7c18879efc50d5ca7cf3c01eb14e9aa534b5d87fff69bbb06977bd8af9c41efa3cb1f9d7ab35155a6d
- TLSH T139F02BC5252A256DCED60D45E406533AC2D2B0613788164DFB70A8ED4E18F4EC9FD999
- MD5 SHA1 SHA512 TLSH