Overview

overview

7

Static

static

3

PartAssist.exe

windows10-2004-x64

7

PartAssist.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/08/2026, 01:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    PartAssist.exe
  • Size 57.8MB
  • Sample260805-bxna4abe99
  • SHA256 39bf111c8fbfd9f6f7980ed6d68c67b51f1ef58279de4caa9c14fa822b83c4e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PartAssist.exe
    "C:\Users\Admin\AppData\Local\Temp\PartAssist.exe"
    1⤵
    • Drops desktop.ini file(s)
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    PID:2392

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        icon_list_error.jpg
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\Win11\icon_list_error.jpg
        • Size 168B
        • SHA256 9d08f08708703f485108a41ba46318e64d2686074e49a2333f16be437eb10782
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        icon_list_good.jpg
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\Win11\icon_list_good.jpg
        • Size 286B
        • SHA256 3229d519413a73c433c440f5e7617d65dd28abf029e2fd0582d93577be49ff9b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        bg_top_h150.png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\curver\bg_top_h150.png
        • Size 23KB
        • SHA256 4d90569f4b4306f2a600c9a2cd3658f3345b13166239f848ebae6758975d90ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg_top_lan.png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\curver\bg_top_lan.png
        • Size 23KB
        • SHA256 38e4db832f8290f80f15a65104f083c5c4d4ab3fec65be98439832f9c7b3ce29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EPW_small_normal.png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\img\EPW_small_normal.png
        • Size 1KB
        • SHA256 2ef421ea7b6d1dbb525aa6694e7d8b7f6b1601a05a1c5ec3248673bf8e4e28f7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ic-1.jpg
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\img\ic-1.jpg
        • Size 900B
        • SHA256 bd849bdefe2c428b488db3ea4319508b736d7b5f64e7d3d0b55aa8b54b279398
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        icon_1.png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\img\icon_1.png
        • Size 1KB
        • SHA256 d6031c7d1cbfc0b663a90af9ae4b73cc48237791570736a31cebe2b8e58ae4e8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        icon_13.png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\img\icon_13.png
        • Size 1KB
        • SHA256 86d6befc925b20c732208a03fec49d4145767deb34e81da7097e32b4f2d3e8d7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        rebuild(1).png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\img\rebuild(1).png
        • Size 1KB
        • SHA256 5a5d95c0cb7f1ba2438c8134a6c9cfd9557181d1b011992e2882fdb6e80d4d63
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        std-special-exit.css
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\css\std-special-exit.css
        • Size 11KB
        • SHA256 fd643efb3656e049082a7eed55dc7235d1c5ac7577b3eceb35a0fad650ea78d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        std-special-exit.less
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\css\std-special-exit.less
        • Size 16KB
        • SHA256 c0e4f71b5d6bf0d0311d35f101a7a36abfa5e53d975dcef90743ac35f47c02e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icon_list_functionicon_list_function.png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\images\icon_list_functionicon_list_function.png
        • Size 412B
        • SHA256 ebde62ab2c44abe45b228b71ceea039ff1fc138f9a299a50e52c81619b73306c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        icon_gou.png
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\images\std-special\icon_gou.png
        • Size 285B
        • SHA256 f0d46505f253f44b52f96070777b69c15744a28869efb5659c502a39d7252f61
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        en.js
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\scripts\demo\en.js
        • Size 24KB
        • SHA256 fbcb5c2d2f03e347056b5b3cee7d5cebbf48fd1cb17417d9b60b61698facd787
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en.js
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\scripts\special\en.js
        • Size 1KB
        • SHA256 d090fba6288247f52bfda1356302c520f87b7b98e464d8b55049e21dea25eaae
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        std-special-exit.js
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\scripts\std-special-exit.js
        • Size 9KB
        • SHA256 7175d1b2c6fb5e5fa4ec76cf7b910f8274065a8e2fc77328aaa2aa0e008b2a0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en.js
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\scripts\std-special-exit\en.js
        • Size 10KB
        • SHA256 f731af3120e939e39fe4e594360f583d17c1e3e26177085c930cb1aca00c6c3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en.js
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\scripts\std-special\en.js
        • Size 10KB
        • SHA256 efe6eac1490869d3c1a334f0f937acd5933ec8cd3cb7af031ac6d8485269d4dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en.js
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\scripts\std\en.js
        • Size 21KB
        • SHA256 469f864dd45024cafd5ab1b860c11446edeb1ef8b7268b333fd31faf70cd6abf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en.js
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\html\new\scripts\uninstall\en.js
        • Size 1KB
        • SHA256 3135e6595ebc0ea5c31060b36d9ae7684b47ea3abb9cddf2bb836849c73b89c1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        loaddrv.exe
        • Path C:\Users\Admin\AppData\Local\Temp\PartAssist\App\x64\loaddrv.exe
        • Size 81KB
        • SHA256 d90631fec9db3b16c62567fe50ca14422e41b8e4d9af78a0c4129750230787f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download