Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 18:45
Behavioral task
behavioral1
Sample
main/amdgpio3.sys
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
main/amdgpio3.sys
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
main/main.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
main/main.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target main/main.exe
- Size 2.7MB
- Sample260804-xd26ssck4y
- SHA256 b6aadf55a7940a4758171df31999294b5f55860afa883a41c7a0cec9297d68f3
- MD5 f2d9dcdafa96b9bf6359050e7c9d11a2
- SHA1 d18aa8c5d7047bec2425f13db1d42684a7337a1d
- SHA512 9272c0591a40bb42b06ac01c2814e4298692175cb5c1b5b7953a41b4328c5cdb6d3637af2a69033acf8d620d6418e93eaec6ab589a1597ac687d2df6b3ae5784
- SSDEEP 49152:k2JB2RzBfuALaAXxvu4v9hZWAnEadCOADb2KKBTiVniK+bcpMn:+TxLaAB79Hdaf2NYdd+m
- TLSH T131D50264F2F501E9E07A8178E9665E0BDA727C540730ABDF23A009A71F63BD11B7E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Disk\Enum main.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum\0 main.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3724 main.exe 3724 main.exe 3724 main.exe 3724 main.exe