Analysis
- max time kernel
602s - max time network
533s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 18:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DELTARUNE-virtual-pet-WIN64.zip
Resource
win11ltsc2024-20260709-en
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
kris.exe
Resource
win11ltsc2024-20260710-en
3 signatures
600 seconds
Behavioral task
behavioral3
Sample
kris.pck
Resource
win11ltsc2024-20260709-en
4 signatures
600 seconds
General
- Target kris.exe
- Size 104.0MB
- Sample260808-wlsfwsbl8z
- SHA256 d048206ab60e33b1ed50cdf8a37328ac915b88ad100ba3ab8307a93c2df1ae2b
- MD5 00b364f1ebb5e6cf75207d886a57759e
- SHA1 dd802c364a5860ecf96465e683ed9eecd673f917
- SHA512 c4f564880612ecdd49adeb51e012f59dc58291c5656354cc20b5cab29dc0d77876285a9d4827b62ac8339afda70ae10654ab4ae640255040b7ca77ce8a9dfe26
- SSDEEP 1572864:BZThOhc7T7P+77xAQyuJUgm0A8S3MDMsM7:0rAQlm0a8ID7
- TLSH T1FB383B53F27370ECC467C23492D7A633BA73B85951386E6AD6A4CB742F21E50632DE24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings kris.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4792 kris.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4792 kris.exe 4792 kris.exe 4792 kris.exe 4792 kris.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\kris.exe"C:\Users\Admin\AppData\Local\Temp\kris.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4792
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2228