Analysis
- user interaction
yes - max time kernel
126s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 14:28
Behavioral task
behavioral1
Sample
Retev.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Retev.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
General
- Target Retev.exe
- Size 67KB
- Sample260804-rtf1lssfmb
- SHA256 245c4870dbf4b2f0102835addb1780d845bd1c31d5ac2a8ac7a5dfe993d6365f
- MD5 32b268f7114cd6816d3b1c0558e88f95
- SHA1 1d0caf4582173eb45e0be05134ed432a21f5af55
- SHA512 9b453ea4ac1ec6f216629ca16654e78f02fb61af8158eb3153e3fbecaae8e78b50c53242c4e76a93d59f3f3150392805a18892b103cd689d6814c7984b5e866b
- SSDEEP 768:d8w6iBGb+IyfJoTOBPca/CCNNl1uHBNdXIBMEB44w7Fv6NDzSkzNT2L:PIyfiTOpZNiMMuw7Z6NDzPNTI
- TLSH T18363E735C9A9B13FD3199C78DE060D84DF62BC8A4784BF97A7D11CE60F92A902F1D681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Retev.exe"C:\Users\Admin\AppData\Local\Temp\Retev.exe"1⤵PID:4156
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3428
-
C:\Users\Admin\AppData\Local\Temp\Retev.exe"C:\Users\Admin\AppData\Local\Temp\Retev.exe"1⤵PID:5864