Analysis
- max time kernel
151s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/08/2026, 04:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
install_sint018.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
install_sint018.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target install_sint018.exe
- Size 40.7MB
- Sample260813-er4yfaar7v
- SHA256 e6f037b0cdfede0c0f8dc97a01faff82c290488e55e4a52fd36a42403132be8f
- MD5 890451b88ebe3b81443e4e0e07367cb8
- SHA1 f2317dbe858806a2b6043fc3db271ac44700ff0e
- SHA512 f4f04beb0367ead4a6333ecda518a68f7f18bb379534fee3f2a9eb3a4c7090d328e739f65378163b6ee5f8e3d9bf5e18b82707f655cbe2c56b67716c2802d50d
- SSDEEP 49152:TJXVSCM39nmT5ocV1Nxst3ZbypRxG80FfElQ+XwxhxuhSnY53G3SrXJAdrFejntN:Tu/9nmHZLxG80DuKA3XAD8ntZfh6fgCm
- TLSH T169974C02F7054AAFE07A9234489B8F61E335D8B146B1937723F55B2C1EEF34C4EA6964
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 4856 6DQETl.exe - Loads dropped DLL 1 IoCs
pid Process 4856 6DQETl.exe - Suspicious behavior: EnumeratesProcesses 34 IoCs
pid Process 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4048 install_sint018.exe 4856 6DQETl.exe 4856 6DQETl.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\install_sint018.exe"C:\Users\Admin\AppData\Local\Temp\install_sint018.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4048
-
C:\Users\Public\vpgBdK\6DQETl.exe"C:\Users\Public\vpgBdK\6DQETl.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:4856
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Public\vpgBdK\6DQETl.exe
- Size 135KB
- SHA256 676a2a7b94ca2f8ec76352ee656e4d075bb342bd7ad6efbc7c19c060001eace7
- MD5 9ec587911e501b73b7cf09f05d0ae17d
- SHA1 5b62403cc9a668c6e5c70ace177fd54fcc4c5936
- SHA512 d05468a472373815c46ccb46ec743408365d24982d10d8a23ee0036c28cf3dacd05d74304ef2d4b7118f91ff3f631f676b2e86ddee92a02cf988b0d3c6247847
- SSDEEP 3072:MmhXb5pgtiaRENEErO9Uj4OqhhUvB4BNgQaJ:MmjgtiayGErsUKh3To
- TLSH T1D0D38C2776A474F9E1778635C8511A1AE772B8760770CB9F03A442A62F237D19E3EF20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Public\vpgBdK\UxEnhance64.dll
- Size 3.1MB
- SHA256 a1fb6ee13d4c0262e48ea21f658e084df24fe271867af78a516d3248515c37bc
- MD5 24b54df93c9344903210aef09a2f4e2f
- SHA1 d597526d011df756a9ef6902b831786301964ac5
- SHA512 0797c277bd6bfe71e6c60d633a8ac5ef1ace05774594986c74e6e59551b54caee2281bf229a0fb42f7748d0704d257921ca9baed458ec7d925b7a24f25f728ed
- SSDEEP 49152:P9KpI8cBa0kj6BK0x3TiMQclkGo2PXk6rkwuuWG/+WizBedfb77N3SnKrKB+T:P9m29xx3Tiqt06ox6+z2rNNrKoT
- TLSH T17EE523E5B6D739F6D023CBF4DA62A1AD70393F505F635C5F3B8929014E62228973A390
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Public\vpgBdK\msadox.tb
- Size 8KB
- SHA256 b75bc00a93486d229386d1896a961110c2fc3899890d39e0f702914088383dc3
- MD5 8fe15279013813d61d27717b730168cc
- SHA1 29359d6f397ebcd72a8284f9a088f241c02f1c78
- SHA512 8f73950081225e3a2c5f7df0f68e4fea751cebbe5960b35a3c3fae62956ba57e155dd4d6101d85e68100b1dfd93de66f5c2a50017a039cb785f69b66cdb7fc1f
- SSDEEP 192:9qbZajnZ45X1q3JXglD+3vR8cwNhIMCGe2y0PQp:9sZqZOXQ3uqvR2Kfzp
- TLSH T16D029E05D7A20CC3D2016C71CD9EB2F5AB13A1DADA3926719C67D4C167072DD2CE620D
- MD5 SHA1 SHA512 SSDEEP TLSH