b7d50e86cf1322fa1a7cbdd2944b27d197bbbb9be10988f89855699808f2165a

Analysis

max time kernel
899s
max time network
487s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 16:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$0.exe
Size 6.2MB
Sample260804-t15nnadf63
SHA256 b7d50e86cf1322fa1a7cbdd2944b27d197bbbb9be10988f89855699808f2165a
MD5 520c1a1ba4ccad9922b4c323cfd59ddf
SHA1 39be78c267bb00da20b82a83c7c61b20ecb2353a
SHA512 8881cd8de1660e02ee8cea8cdc5c0339687c854de8fd312ec8df8329d2b039423a8c3a841513642c1e4492a246aaab7f5ae07fb3196d891d8035a1298430a5ad
SSDEEP 196608:dtaHQGlVSFIp+UCNpg71sGd8Nr/S63gdPpH:dwHQGlVSFIp+U0pg778JL3gPH
TLSH
T10C660651B3F84519F0F39ABEDAF59656D977BC625B21C09F01E0610E1A32BA08E32733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1968	$0.exe
1968	$0.exe
1968	$0.exe

C:\Users\Admin\AppData\Local\Temp\$0.exe
"C:\Users\Admin\AppData\Local\Temp\$0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:992

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

75A3.tmp.ico

Path C:\Users\Admin\AppData\Local\Temp\$AnyBurn$\75A3.tmp.ico
Size 2KB
SHA256 b4d6704aabfcc8b7cb8f4ee58b162dd124e2d0e4dce20ecf13eebd262dd1e76e
MD5 4198afdeb9ace242c575ee572af22e1f
SHA1 32784594ec69ca459878010401c3931be8e5e15e
SHA512 d4288466d9a669c7735dc788f81fd5581876048644c48a58df5e2f8c70d468464d9de2bcbd295cdfe8510fd77a9a3cc26e3de0a1cf985622fec00baefda7f4cc
TLSH
T12E4120DF5550C28EC4E5E372D181CB3DB16D0AEE90882E4418517427BAB86DFEA17292
MD5 SHA1 SHA512 TLSH

Submit Download