Analysis
- max time kernel
899s - max time network
464s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 22:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1.exe
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
1.exe
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
General
- Target 1.exe
- Size 9.0MB
- Sample260812-2f772sfb73
- SHA256 9592a3c354a88902c80235dab679b514a4780123512fb7a8d14440089a575dfa
- MD5 5933c823edb2b15676e74ea15f688d2b
- SHA1 52d8c01dd4bd74756de09b745c615376c80d7980
- SHA512 010c2e0d34e166321251693908ed5869018c284595840c527bb9a6a5093af12d13e306c0c91243fb3a58a28f3df9873ebbeabe9eb5babcd47fb946aeffdc4a1f
- SSDEEP 98304:COpYfjDCSeQFZX8+Io4pi+UnVorWbU5kAECgHmyCvlD6b:obuSXSG6kAVgHHU
- TLSH T176969E03F353D2ECC52AC4308355A333FB72BC89463676AB6B945B306E92B605A1DF59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4156 1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1.exe"C:\Users\Admin\AppData\Local\Temp\1.exe"1⤵
- Suspicious use of FindShellTrayWindow
PID:4156
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4064
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4300