Analysis
- user interaction
yes - max time kernel
20s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/08/2026, 09:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fibonacci.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target fibonacci.exe
- Size 124KB
- Sample260804-ls4gmaxbkh
- SHA256 1ddabf4f5412613e005323c85dc203da712becea10580372773cfd50f2f92a62
- MD5 54b7fbc0f8483f252f3ebe96d6e09133
- SHA1 a725587c63d3ee22ce87b8b259db3819fda248b6
- SHA512 7b98c489e0b2665c3379884e4008afe7f69ee11a6bb5cae92a3b36d42d288679603367d00e9bcbce2ef8cc6f893b0ed23519288a3ba03ca789ba80326cebde0b
- SSDEEP 1536:gkr9BzivjEzhuKHk1g6umZAiyhuixc8E9YKqmmx6WdtmZuXuzvOWU650J:gkB8vgVk1g6uqyhuV8AqHx6JZ25WU65
- TLSH T151C37C237651A0FDD449C034826585A7B772B4C90F326BFF13E951382FAA9E26F38764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2512 MiniSearchHost.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fibonacci.exe"C:\Users\Admin\AppData\Local\Temp\fibonacci.exe"1⤵PID:3520
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2512