Analysis
- user interaction
yes - max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 22:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
private emulator.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
private emulator.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target private emulator.exe
- Size 63.7MB
- Sample260804-1947tay1ex
- SHA256 675b997902b66a84689b79e228ecedebaf36592da8c9f3ec06e55ca833414a5c
- MD5 4fccc8500e6548297848b09d68929409
- SHA1 78fdf701837fa7dc01f3ea69196254011eec8a11
- SHA512 2455768a2b858be37f9479dccfeb8fb926619283ddbd79254b76056dbc08fa6902c26ec8e6a09a02f761e94a479c28d55eb7f9bab6d603274076064c600b30f7
- SSDEEP 786432:f9x7igiP7TCe/7zP7Zt1IiJw5VjVkacZrA:f9x7igiTTCeDzzZt1IiJw5Vhk
- TLSH T10EE7724C24500AE5915BE815EAABCF1B5FE9D6EB4BE8244DBCA88E344CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 discord.com 10 discord.com - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2020 private emulator.exe