Analysis
- user interaction
yes - max time kernel
14s - max time network
17s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/08/2026, 08:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aklvfi.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
aklvfi.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target aklvfi.exe
- Size 417KB
- Sample260803-ke9aaaef82
- SHA256 5ae6304109a3a4f7c5c7ac77929827a09387c02acaee5e9d7e071c938610df40
- MD5 a16138d0765e7c3418e8ab7b9b829375
- SHA1 d86b9498c091f4e62a1bec95554423da14dabca1
- SHA512 fb257a3bbf4f2ebeb6b1f850e2d7953e70b08ddba915a2b3413428fb9dc063a8da112960b7744481faf8b089b91e1a3cc1c7d191a82687c817f47122e24ba8b9
- SSDEEP 12288:RawjWDj1zj1yj19b9t1Kj1UgfzfxLWYpwa9TU:R1jWkC1JD
- TLSH T182946CDF76860BF6C974C5FCD219B642E3C699018F40ADE9E2037E6A9C9BC2C8F12551
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\aklvfi.exe" aklvfi.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\aklvfi.exe" aklvfi.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
- Size 808B
- SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
- MD5 878e958d6bff424e59d1feb51584a01f
- SHA1 b11261559bbea40f1874448196e2934277a537e9
- SHA512 6481a56d17126cf94901bed6f418af28f63089da57af4258fb13e468063c4d7849f78ca00a0e4a72c249a639afc8304669f99e48a360008f8e64172ab3133213
- TLSH T18D0152CD6E2925408AB18A334AB9C4970DB9724A3AD5910C4453A4A024D07588F0F54E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61
- Size 355B
- SHA256 12fd0590708bb38d8039bc994178acee8a3d220f0cd194b0f1c2fc9ba622f927
- MD5 53ae64e9ee4ba962ee4b516077735710
- SHA1 dae8a6fd15a9c447cdb2778f63880db25b0dd198
- SHA512 ec31df0d1fbf225bc5a884ee8324aab6e2aa43031bede210b04677ed825966c8ebc0693b06d8f0e55de2cd5919b95a7b25691b6ae1fab893f58756e08836a168
- TLSH T1BFE0C08867AC24200AB19E539550C4936FBE31892970B05C8251CBED30C1A58C28B30F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\22D536C4B4AD2CEF7AC6B7789FD235E3
- Size 283B
- SHA256 251ed08cc8f5873098ea5ee083034e7cd99ece955920e12a42e50306a94cb6eb
- MD5 7f9d3dc54f928bf6c38576705ad18203
- SHA1 2b5e33e5301753684973bfddbc6cfb11d297cf90
- SHA512 ef5b01e74a5e49cd0fe887b9d92d830e1052bd93cda7d11ee68829705432a21a9943535de8dff9d77eb3402253adf9d5760eda03ca80a0c3495f83396d648967
- TLSH T102D0C29CA9273E660FE69B454A50C087AEE610CA9C15B648008EC45B0887B02EA962AE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\535A276E0FC52C6BE2562C392CE8F054
- Size 37KB
- SHA256 306a637ebb29669ccdaaa2823a0616885366da8251a555d79d84584fec9903c0
- MD5 576fa99a5d5c3a28e6ddd6542a2a260e
- SHA1 62f88dc2b646b9fdfd2861d693d37d8dcb416cb7
- SHA512 8f624da3b05b22ae2cdc1413afac9e9cd9dc62db275fc474c6d2a26c6a0c798271d35ba1f592210314750ed799d17855d1738d0c93eb986ef221fa8f12807d97
- SSDEEP 768:+hLNfEbfm198fbYNTWw4hkvn+3ZhaRbz6n:+hFEbuAyTWwmaFo
- TLSH T193034FA89C37F961AC4B9F658DEEDA5676F512C52E40822E0E3C3ED0DC13A97DB57080
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
- Size 192B
- SHA256 0be3630297f270f03f98f3dcb738de132867b37f67227ce69677d04f85839226
- MD5 1259e549b7f91baf394e8ef9149ff81b
- SHA1 a1362bf878cf2b335ebdf815bb8ea7cb0307224c
- SHA512 fd850356908ebf1a9100713d3afc352f5ab45411160bd3812e71c451785d6928743f5d1c10c7f41b0fe2d3262923ab357ff9806bc364e4e14e3154c48a5f2082
- TLSH T124C0801C59515515F1D4437C01C13D4357118101E241CF0516F52544C956B192834C29
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61
- Size 192B
- SHA256 46a7a8f390f5cdaa9af836d867de8ea9cf6a8e96ba9ff9b67f453c697634b7b4
- MD5 56940c69fa11e18468150dd5f5389102
- SHA1 dd6c6351a3cb2119b0de6a45d0270e62637d1eac
- SHA512 028f76569a1f5d7c84fc9fb69309a579656b4c3c7eb72b636b2e4c0a3cbcd81b98a37b190aea74242dd749246088a3746da13c5cbf40d4466fa08fefe070dc69
- TLSH T18BC08C1C5AA24606F2E543BD02D12D03AB60C520F6858F0126B12A58CD11F542C35C28
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\22D536C4B4AD2CEF7AC6B7789FD235E3
- Size 192B
- SHA256 6aec5c9464927868fbbbd1751bc1b6cb8258cdb6fa3d8cb31a6b3ebdf69a7b2d
- MD5 303aa84973ecaa87ea374f3fb00413eb
- SHA1 78484b1e62da7802a2a0d2ae0f5d2a0d22a723da
- SHA512 936cd61a1f999b81c01c7b15dcda9b59d1be0cf822a82af7470bf5d762e3e0c49fd93e51c6e2cd9cbf7cc8306c7b01bab9f83b0038fabb10e185d1d5c5be0129
- TLSH T101C08C282BE21606E2E80BBE22D02A839A14D501F381CF1A163A2A888D50B181C30C1D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\535A276E0FC52C6BE2562C392CE8F054
- Size 246B
- SHA256 51eb9eaa055fd4612027a2691fa21ba5cd9f9a1c7a57a62abc22691a08f7431b
- MD5 f192f53598955c4cb7ec25e428e6c03a
- SHA1 b74fc28195f32fbf89b770307680c68db3e7c9c7
- SHA512 288afcff55ea6d67a9118fc68f9df030e649119571fb511585663394032b45b5f61c55c87e4a7065df4d7f57a5e9061a085f045f0701d9561d58a679e6b88c58
- TLSH T1D7D0120E2BA65122F266DA396C704B02F664B364F1E1470E1BE7199C8D28B583C20D5D
- MD5 SHA1 SHA512 TLSH