Analysis
- user interaction
yes - max time kernel
104s - max time network
102s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 00:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Shampiss-UM.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Shampiss-UM.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Shampiss-UM.exe
- Size 1.3MB
- Sample260808-ab6pwawapf
- SHA256 2c7d5860cbbb3e722025e61a4b60e6413d46b76c8f556d2d76cae251faf54439
- MD5 7a0ea6c9d624eeddf3e33501fbe36d45
- SHA1 67ac7a35795d0d97009042e9b5c4bcb7b53e2254
- SHA512 061f36376a17ebc1951d5e233b734c8461c9912f1037c41c29a7a4d0a64f84d325fa124fa640f1b902e39862704c774afc1e2a79d950f65a193dbd6b36646abd
- SSDEEP 24576:ZCokZUuysNzbGBVjgjliL+29DplmOZAViWnwgF+B3T:MZUMaVjgjliy29l5WnM
- TLSH T1C865AF1AA1AA01ECC1B6A178C665960FF772740D17B449FB23E444A42FB37E45FBA703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 1032 cmd.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3936 wrote to memory of 1032 3936 Shampiss-UM.exe 90