Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 04:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
remotelink-client.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
remotelink-client.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
remotelink-server.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
remotelink-server.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target remotelink-client.exe
- Size 21.0MB
- Sample260802-eqqdnach32
- SHA256 7c6baf008ae9fb06c881986eaf3b08a320bbeec3ddd580a19842ac9f571363d8
- MD5 12c4bc77a9b47b4df1142a08a2adc318
- SHA1 320628842fb58ba8777317f08b371b4e5abd5a78
- SHA512 9bda081954dda45e9c0d0c29f5c5455fa3b1744e02c336e300dc3c98f528c6b11a3c77340d518aa7219ccaf6b6ba9b4c97e5b7cc2b9f986ae07a1e1b55aad93f
- SSDEEP 196608:qFtwfgrPCKzmEvNaOlxnmuewa67odS0tSy1Oej:0tfPCOl3lFHsS0tSy1Oej
- TLSH T102278D07F602099DC227D67A82B6763AB731764566346FBB1E885F356F22BC04F1B708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4176 remotelink-client.exe