Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 08:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aklvfi.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
aklvfi.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target aklvfi.exe
- Size 417KB
- Sample260803-ke9aaaef82
- SHA256 5ae6304109a3a4f7c5c7ac77929827a09387c02acaee5e9d7e071c938610df40
- MD5 a16138d0765e7c3418e8ab7b9b829375
- SHA1 d86b9498c091f4e62a1bec95554423da14dabca1
- SHA512 fb257a3bbf4f2ebeb6b1f850e2d7953e70b08ddba915a2b3413428fb9dc063a8da112960b7744481faf8b089b91e1a3cc1c7d191a82687c817f47122e24ba8b9
- SSDEEP 12288:RawjWDj1zj1yj19b9t1Kj1UgfzfxLWYpwa9TU:R1jWkC1JD
- TLSH T182946CDF76860BF6C974C5FCD219B642E3C699018F40ADE9E2037E6A9C9BC2C8F12551
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\aklvfi.exe" aklvfi.exe Set value (str) \REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\aklvfi.exe" aklvfi.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
- Size 808B
- SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
- MD5 878e958d6bff424e59d1feb51584a01f
- SHA1 b11261559bbea40f1874448196e2934277a537e9
- SHA512 6481a56d17126cf94901bed6f418af28f63089da57af4258fb13e468063c4d7849f78ca00a0e4a72c249a639afc8304669f99e48a360008f8e64172ab3133213
- TLSH T18D0152CD6E2925408AB18A334AB9C4970DB9724A3AD5910C4453A4A024D07588F0F54E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61
- Size 355B
- SHA256 12fd0590708bb38d8039bc994178acee8a3d220f0cd194b0f1c2fc9ba622f927
- MD5 53ae64e9ee4ba962ee4b516077735710
- SHA1 dae8a6fd15a9c447cdb2778f63880db25b0dd198
- SHA512 ec31df0d1fbf225bc5a884ee8324aab6e2aa43031bede210b04677ed825966c8ebc0693b06d8f0e55de2cd5919b95a7b25691b6ae1fab893f58756e08836a168
- TLSH T1BFE0C08867AC24200AB19E539550C4936FBE31892970B05C8251CBED30C1A58C28B30F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\22D536C4B4AD2CEF7AC6B7789FD235E3
- Size 283B
- SHA256 251ed08cc8f5873098ea5ee083034e7cd99ece955920e12a42e50306a94cb6eb
- MD5 7f9d3dc54f928bf6c38576705ad18203
- SHA1 2b5e33e5301753684973bfddbc6cfb11d297cf90
- SHA512 ef5b01e74a5e49cd0fe887b9d92d830e1052bd93cda7d11ee68829705432a21a9943535de8dff9d77eb3402253adf9d5760eda03ca80a0c3495f83396d648967
- TLSH T102D0C29CA9273E660FE69B454A50C087AEE610CA9C15B648008EC45B0887B02EA962AE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\535A276E0FC52C6BE2562C392CE8F054
- Size 37KB
- SHA256 306a637ebb29669ccdaaa2823a0616885366da8251a555d79d84584fec9903c0
- MD5 576fa99a5d5c3a28e6ddd6542a2a260e
- SHA1 62f88dc2b646b9fdfd2861d693d37d8dcb416cb7
- SHA512 8f624da3b05b22ae2cdc1413afac9e9cd9dc62db275fc474c6d2a26c6a0c798271d35ba1f592210314750ed799d17855d1738d0c93eb986ef221fa8f12807d97
- SSDEEP 768:+hLNfEbfm198fbYNTWw4hkvn+3ZhaRbz6n:+hFEbuAyTWwmaFo
- TLSH T193034FA89C37F961AC4B9F658DEEDA5676F512C52E40822E0E3C3ED0DC13A97DB57080
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
- Size 192B
- SHA256 94b0bb66ec22dfb2fa4a4bd6d2e3ebc176e389eb0f9e76a76e683f434a129b32
- MD5 9ca988b44c277fa5a81dae1d2ddd48e7
- SHA1 b2c3c3cd98a61a97463f12b83b02f7a5b1989ad9
- SHA512 5d88228ddc70bb50b2605f010d02c91fbc8a76cca01880977794ff5acef1f645ad39b3ed4f69464cac117dc6fabe06d7b6b95e4e46c8d6ecd4e43414bb24278a
- TLSH T199C08C1C2AA25A0AF6E8437C12C139139B218501E241CF091AF12A08EA97B1A2838C2A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61
- Size 192B
- SHA256 11b76ea5c9c2a7c76791f7996738784d12be4157bd36841496f39eed78f7edb7
- MD5 8cabd50daccb456a8e5580474d57d8ce
- SHA1 6e965e07c0246c149bd7c84e4b803abe0c63bc77
- SHA512 73112795ee1be52bc7087a49df002d2a9f279a5986b75af04871d5781e9e1a86ef9a22628774900278c2cc4ed506d47ef82fe47ba23828dc20f7ec2e7c5efe4e
- TLSH T15AC08C1C5A624606F2E5437D02D12D039F218821F2458F0116B12A08DD61F942C35C68
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\22D536C4B4AD2CEF7AC6B7789FD235E3
- Size 192B
- SHA256 02bb481738441f49f000908d7a83e56414db164a1bc6601ae20877967cdd02e9
- MD5 dd2e4d76f46fd7190ab6e8a71fa9ecf7
- SHA1 4f84a012597e716adfbf7b9b6538c1c3b075991e
- SHA512 9446cc5f386296358504cd310e992b3ae9bc139c5a8a293681f8acf483003c6620503e6f25490d73c231310c43e003e891e712aff6883a3e6110cbda85700390
- TLSH T122C08C182BA20606E2ED0BBE22D02A839B14D402F2818F0A163A2A488D10B1C5C30C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\535A276E0FC52C6BE2562C392CE8F054
- Size 246B
- SHA256 c0fcbe7b7820a40bdb91d31130d66908e0cdd8c6e35542476fb2f0af9ba4f3f7
- MD5 a7baf7fd2a83d17d62d79cac8b4a5309
- SHA1 ec9f67d2a838b1e9a4d4589248e6127d7841ac2c
- SHA512 89739e08fc261825c83ae2969d76b95bfaf75520344436dfb191fbde06d0daa5da23cfcf76582d52e815c85e760adcd743387e348df38d0c01a34975d5fde8ea
- TLSH T1E3D0220E2F929222F262C6356C300B02F5207760F1F0430E1BE7085C8C28B183C20C1C
- MD5 SHA1 SHA512 TLSH