0281dd6f6d72f610a6c9a2b260d325e34ac760bb6df3aa241008573c3302d6ba

Analysis

user interaction
yes
max time kernel
61s
max time network
65s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 00:03

Reason

Machine shutdown

Target
password.exe
Size 78KB
Sample260813-ab2e6axcmb
SHA256 0281dd6f6d72f610a6c9a2b260d325e34ac760bb6df3aa241008573c3302d6ba
MD5 316d56ebc093ce4e203182f18090fb47
SHA1 0ac11e346193ee8f07924cba1ad43af55e085590
SHA512 3e586f0865844aa5adf49b86239ca0fd2f4581209479ebee5ce6df253a48939c4d4f4f72f72a60464984e96d3daa0abbf9c8196f2babc6eb675ebee7c3f556b2
SSDEEP 768:+ytFQNUJATJiYe/7wvy4lT+Tn2hLXHsCVJmYUbJFR4PsKa1ax7:+rOJA47wqG+ShLXHs8JmYAEsKaw7
TLSH
T1EF73E9D56BD58CD7DAA5633C61EAC321273CFED08A934B17E83021311B53BD16ED928A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1700	LogonUI.exe

C:\Users\Admin\AppData\Local\Temp\password.exe
"C:\Users\Admin\AppData\Local\Temp\password.exe"
1⤵
PID:2944

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2936

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k CameraMonitor
1⤵
PID:4164