Analysis
- max time kernel
900s - max time network
622s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 12:15
Behavioral task
behavioral1
Sample
Download More.url
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
Join Telegram for more.url
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
cr-keygen.exe
Resource
win11ltsc2024-20260710-en
15 signatures
900 seconds
General
- Target Join Telegram for more.url
- Size 128B
- Sample260804-pe2yeszcpg
- SHA256 771846ab3f8c33f137024e6a13e5a41ac30a212a8076ca80d8cb96093a77da69
- MD5 8e69ef0723269ec6a3f88b38f3d87cb6
- SHA1 98e410c6fca03ab37d2e82bc103f499019d8d5b4
- SHA512 63d3e6f00d44a243119624a09a4e3261fc114775a6fbf4d561e849905383a391dceb558f8606cad4f03682b78119c8b26e5c23141f22420aeb15b7e9f4e231d1
- TLSH T1B9B092AF4246828BD352D50A60B0F908985EBAB498E6D05C6648EEDA0C980D2C658A36
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\Join Telegram for more.url"1⤵PID:2164
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4952
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:2064