Analysis

  • user interaction
    yes
  • max time kernel
    89s
  • max time network
    85s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 15:20

General

  • Target
    good/main.exe
  • Size 1.2MB
  • Sample260813-sq76csshmb
  • SHA256 026e701fd8f9388984bb26d0174cfa6a2cb041ffc2172b23ee21b9e1ba35b001
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\good\main.exe
    "C:\Users\Admin\AppData\Local\Temp\good\main.exe"
    1⤵
      PID:2600
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4320
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k GPSvcGroup
        1⤵
          PID:6904
        • C:\Users\Admin\AppData\Local\Temp\good\main.exe
          "C:\Users\Admin\AppData\Local\Temp\good\main.exe"
          1⤵
            PID:4964

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                memory/2600-0-0x0000000140000000-0x0000000140145000-memory.dmp

                memory/2600-1-0x0000000140000000-0x0000000140145000-memory.dmp

                memory/2600-2-0x00007FFA7A5B0000-0x00007FFA7A5CC000-memory.dmp

                memory/2600-3-0x0000000140000000-0x0000000140145000-memory.dmp

                memory/2600-7-0x00007FFA7A5B0000-0x00007FFA7A5CC000-memory.dmp

                memory/2600-8-0x0000000140000000-0x0000000140145000-memory.dmp

                memory/4964-10-0x00007FFA7A690000-0x00007FFA7A6AC000-memory.dmp

                memory/4964-11-0x0000000140000000-0x0000000140145000-memory.dmp