Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/08/2026, 01:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target setup.exe
- Size 512KB
- Sample260814-be8t3sed82
- SHA256 98ac132c02c4a589c90a490b29f30b392d630caa852dcec843a470d088111b49
- MD5 2d143d9087391284ef5ba0b96e6817b4
- SHA1 08921be3df3e426ed7db352c5ca9e97a8a80e1c8
- SHA512 f5f50103a7e21edefeb358603cf287c40f679d71e731ad1c13fae0b85b39dd6e7380ce22c43cb8ee23f9e277dac207aad346651be1ba7ba86cd9ed4fb9a07a5c
- SSDEEP 12288:XU1z9slRKzlFjEV4xPOojf/Dvm9AKWfwXX:XU5+ulmi7vpYXX
- TLSH T12EB4F1AAFBA942F8E076C17448955602E6F630876B9017FF436442672F276D44F3FBA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4516 setup.exe 4516 setup.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4516 setup.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4516 wrote to memory of 4252 4516 setup.exe 80