Overview
overview
8Static
static
3unknownzip.zip
windows10-2004-x64
1unknownzip.zip
windows11-ltsc_2024-x64
1AllService....1.exe
windows10-2004-x64
5AllService....1.exe
windows11-ltsc_2024-x64
8Emulator.exe
windows10-2004-x64
7Emulator.exe
windows11-ltsc_2024-x64
7Emulator.pyc
windows10-2004-x64
3Emulator.pyc
windows11-ltsc_2024-x64
8How to use.txt
windows10-2004-x64
1How to use.txt
windows11-ltsc_2024-x64
1launcher.exe
windows10-2004-x64
5launcher.exe
windows11-ltsc_2024-x64
5mkcert.exe
windows10-2004-x64
1mkcert.exe
windows11-ltsc_2024-x64
8payload.dll
windows10-2004-x64
1payload.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
898s - max time network
540s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 18:24
Behavioral task
behavioral1
Sample
unknownzip.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
unknownzip.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
AllServices_module_v2.0.1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
AllServices_module_v2.0.1.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Emulator.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Emulator.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Emulator.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Emulator.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
How to use.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
How to use.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
launcher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
launcher.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
mkcert.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
mkcert.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
payload.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
payload.dll
Resource
win11ltsc2024-20260709-en
General
- Target AllServices_module_v2.0.1.exe
- Size 34.1MB
- Sample260809-w168latcpg
- SHA256 1d2fb3885e22a2852b8e18a9337bb1f7de986c19f6f2c5b5067c4ce5023fb041
- MD5 87ed2118ce7591847c9fe270ad690add
- SHA1 3ee345ee8230170aecd66861d44d34344b336f72
- SHA512 0a19f6284142f250dc17d623c01c68598cb0a2800aeeddce9f1a7ef96de9aafbcd20e956411e29ec733ffb1cd588d76920e9c278b6fc798e66b0d235a5495d7d
- SSDEEP 786432:pFqyuMARGZWEGSwRHrSpMbxsRqE4y6fSUxGqB:3qyDAgWvSwRHeCE6fSUxG
- TLSH T10D77239364D453E8C6C34900928E13DA52D1A57E8DDF591D2BC73C026A31EF39A89FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 3556 AllServices_module_v2.0.1.exe 3556 AllServices_module_v2.0.1.exe