Overview

overview

7

Static

static

3

txt.exe

windows10-2004-x64

7

txt.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 15:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    txt.exe
  • Size 78.8MB
  • Sample260809-s62zaa1cja
  • SHA256 1b666d917b7deca0962944e37f3136d715a1d16c9050b98827dfcf8e659ffff5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 46 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\txt.exe
    "C:\Users\Admin\AppData\Local\Temp\txt.exe"
    1⤵
    • Loads dropped DLL
    PID:4568

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectWriteForwarder.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\DirectWriteForwarder.dll
        • Size 493KB
        • SHA256 e585360ca511a352f0b53438a24b8f588b3ae7fac73a8f9abe1e9c18c8affc09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.Registry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\Microsoft.Win32.Registry.dll
        • Size 113KB
        • SHA256 a4244204f35b3f9afb9321322a4aa140b082dcf6b7744f9ceb2525c7a0dc1895
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationCore.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\PresentationCore.dll
        • Size 7.9MB
        • SHA256 96a329ae739f41626263b52e9d4179f55a49c5be1ab0f0285c7b95ff119eb07d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework-SystemXml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\PresentationFramework-SystemXml.dll
        • Size 33KB
        • SHA256 2c8c47df061bd6818a93fa6397f739e9051f90de88d57ae2a5a01657247f833a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.Aero2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\PresentationFramework.Aero2.dll
        • Size 433KB
        • SHA256 073def32d1fca0a60e9fae5c12b4fc150f2588a659306586e982675781b02201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\PresentationFramework.dll
        • Size 15.1MB
        • SHA256 95323c3fb3370d53a2a8ff288327ee5186b006b18c595d54a0f8495340d066c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationNative_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 7fec1277620afb3100c1025e018e9f6dbd4eb495c2b1370b2ad9c6020066faa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Collections.Concurrent.dll
        • Size 197KB
        • SHA256 452a590c5ecc099d34023845daa8b6a1d298efaf412d20ef69db40fc955c40d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.NonGeneric.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Collections.NonGeneric.dll
        • Size 101KB
        • SHA256 6570a4691cafd9b56c24042ad8ba0ed60304ef2aad4a4ee680b105f57abcde8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Specialized.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Collections.Specialized.dll
        • Size 101KB
        • SHA256 fcb36f4fa19d63c7304e033b27268722b478d1c1687dc28fd3036c9dd913abc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Collections.dll
        • Size 289KB
        • SHA256 22f81315a6dbe69080c917faffc9d99f8ebd0d20dffad432e26d11f9c14aaf2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.ComponentModel.Primitives.dll
        • Size 77KB
        • SHA256 3324d2a3e9f7f285f1d325061bd595b1f3a784515830d2fab5cebba9c42e856c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.TypeConverter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.ComponentModel.TypeConverter.dll
        • Size 749KB
        • SHA256 66042cc87c4ea2026c3aae28c0e4b3c0c1d68eb8e82be3d27fadfa3b77f51b56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.ComponentModel.dll
        • Size 29KB
        • SHA256 b8cfd656839339ed7de84cf62d10a7fb798715d0151802aed8ca5fe989a9ba6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Configuration.ConfigurationManager.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Configuration.ConfigurationManager.dll
        • Size 1021KB
        • SHA256 0ff9221244b3f0a620400ca2a1a7d962aa713907a304bea1cd0dbe8bad0f750f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Diagnostics.Process.dll
        • Size 321KB
        • SHA256 736e2d901a5f9d45a120fc4f05d691049b34911c7122ccddae4b5aacb55b4f7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.StackTrace.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Diagnostics.StackTrace.dll
        • Size 41KB
        • SHA256 dd98916717eac59e950d33f098600df665f4cea61cd0648151ee17c0088602a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.TraceSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Diagnostics.TraceSource.dll
        • Size 137KB
        • SHA256 866d207a3ff1ef43a43eeac9f0f5eb6b9cebb07e23f39d9b2e79e8b6b9f4efc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Packaging.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.IO.Packaging.dll
        • Size 313KB
        • SHA256 92b115060814437134fe3c667b2fd0f5b49e389db66e5fe02b4c01a48f645b03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Pipelines.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.IO.Pipelines.dll
        • Size 185KB
        • SHA256 92d73661831be59bcaaa975331a426e3e5181c844f51ff15127f1e03292ba648
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Linq.dll
        • Size 681KB
        • SHA256 95cc6c09281172cccec22bd97206f757691fa88fbbb0228156dde3e267bcbceb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Memory.dll
        • Size 157KB
        • SHA256 1078a6c41bb1ce7ac34143318dea476b85ff174f9e69af8e43979bdf8f88a8c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Net.Primitives.dll
        • Size 205KB
        • SHA256 f18105d82c800dfea55f99fe5438fb934fb56ec9cfd83d2cc64b41d596633080
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Requests.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Net.Requests.dll
        • Size 365KB
        • SHA256 57790fa30be9efb6fde90a4515ea3e523a24519db120e7ab054b71546005d5dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebClient.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Net.WebClient.dll
        • Size 161KB
        • SHA256 0792678906348347748d3b08b1ba9e9b0760d2f9e6604c3eb1f7e35e10df75ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebHeaderCollection.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Net.WebHeaderCollection.dll
        • Size 61KB
        • SHA256 3a8c1dc42a23a3f2b0abed3909dfd10171507cba9feb49f8da6839ffb714fac4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ObjectModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.ObjectModel.dll
        • Size 77KB
        • SHA256 3f2ccf93fd70f0919663654c79d6ef8185680d5cff3e71c7e4dfbe043e4f7e4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Private.CoreLib.dll
        • Size 15.3MB
        • SHA256 5b6700e2802afdb2cc4863b096760a66442e89fd6ee5edb718c697ae5cf33ddc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Private.Uri.dll
        • Size 249KB
        • SHA256 5541bb33861941addd700eacdf9a206c49da1a0382bb6725d50eda964b656c36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Xml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Private.Xml.dll
        • Size 7.4MB
        • SHA256 99098e70118247ebcc8c466e737c326a1fa837cb23d1e3429d9d1f0d395cafdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.CompilerServices.VisualC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Runtime.CompilerServices.VisualC.dll
        • Size 29KB
        • SHA256 bf3e787aef846dc36c7f4f4bc678e27cc3b39daba14ab1a223f179823d27ed29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Runtime.InteropServices.dll
        • Size 109KB
        • SHA256 b6231cd2114de5d310fa8665715b39a08c0f045da62c66648dc948ae757b5b4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Encodings.Web.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Text.Encodings.Web.dll
        • Size 121KB
        • SHA256 068e6a2baf03591d06c9e18bf1c85bfb5614edbe19110118d6c0de8550b2f8b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Json.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Text.Json.dll
        • Size 1.8MB
        • SHA256 d196448ca8c8dd3a4f0360f8f90602ed6b0044245b4613d52f0b3391b9d897b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.RegularExpressions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Text.RegularExpressions.dll
        • Size 1009KB
        • SHA256 3347fc1878e3c943a309b7433974f6ae9cde292319eaf76432f413726788e1ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Threading.dll
        • Size 81KB
        • SHA256 73e42dc61faa190b99da8e13234ecf5276468ba43da277b957e595c696329598
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Controls.Ribbon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Windows.Controls.Ribbon.dll
        • Size 1.4MB
        • SHA256 93c08fa4201639ec6698d01defc4490cbdf372327e227adfdad60c97f03391db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Extensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Windows.Extensions.dll
        • Size 117KB
        • SHA256 76538b83966771a5e9fa8dfc1e7cd9f5ecac83dcb88b8dbf157885f7d4c07deb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Xaml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\System.Xaml.dll
        • Size 1.3MB
        • SHA256 0c47b6d98365094016d92fd4831119afd3069ce8a1497190a78183b4531bfc1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationProvider.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\UIAutomationProvider.dll
        • Size 61KB
        • SHA256 989b311f6703305c74d89e7c1b2a761bbed572cf650fd6a96cb29d0f3d0a5e30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationTypes.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\UIAutomationTypes.dll
        • Size 289KB
        • SHA256 2717e439bd2677a4f958a8bec61120b6ea92546243626a4ce41cad2b72c1b305
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WindowsBase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\WindowsBase.dll
        • Size 2.1MB
        • SHA256 09e57985154139bc0c3b50b9de5a57078864199874479bbef87929bec5e82401
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        txt.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\txt.dll
        • Size 10.1MB
        • SHA256 b910db09f147be9b6e3e2f19ec6ca90b9bcc52970285fb4d259c9a1d53aaa368
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpfgfx_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\txt\WKnsv8ML23yJ\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 daee35a02ebb5bcdca5ff6fb02b6a65664d0ef24c5a449a5c9fefece798f8420
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download