Analysis
- user interaction
yes - max time kernel
12s - max time network
13s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/08/2026, 15:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vaultsense-dummy.exe
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
vaultsense-dummy.exe
Resource
win11ltsc2024-20260709-en
5 signatures
300 seconds
General
- Target vaultsense-dummy.exe
- Size 1.1MB
- Sample260803-stchvstyhz
- SHA256 d45c0709391dc838e529c851013f9775c23919754f45c9345f9729d71455c2b8
- MD5 4d307065309d1ac744b27c831f8b26b6
- SHA1 b33d34548fed6871c8e4488bcd589ae88cd92a92
- SHA512 7f2c41bf702f702b6e62592ee08ee3495b6934c1076d02d16628c5cd01211f0350c27ed81dfe62c98a82485c967fc75fd7cb222c5ea4e7bf8aef8289644a041c
- SSDEEP 12288:IZ+OE4MmD6/Oyspc5EEBBBHGBgzGerwGXvPqItNquB:Icb4M06WpoPrw0vP3f5
- TLSH T1D7357C83EBE385D8C156C8B5534BF137F9627C8E4A157196ABC41E633E67B64E22CB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 vaultsense-dummy.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString vaultsense-dummy.exe