Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 02:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
General
- Target 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe
- Size 1.1MB
- Sample260815-chcfqaxamf
- SHA256 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125
- MD5 ba5640338d96511463724cfcbaacc681
- SHA1 ecca1923a915bf0e5aeaf93e54b390aafe5ec0c8
- SHA512 878cc3e66f26a3354b41dc5b7ba6c48bd8cfe1c9ad9c63163507d9f7591424cea3e8b1750777d7f8e4688d1fa215ac7421eeb2435468694529d711d33981af92
- SSDEEP 24576:HyY0NAbHNIINlH1dY0xOV71euy4gKsqjJYzUi4Mc/hytt:HDtIIbTY00V5euzgKTOzhJcpyT
- TLSH T16135BF5972B441F9C0BAC1B4CDA79A07EB72780A13309ADB03E15A952F736F09A7F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe Token: SeIncBasePriorityPrivilege 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe 1488 3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe"C:\Users\Admin\AppData\Local\Temp\3fd82ad55a2ecbf066bcb34fde962a81c353353e1e8eb5e124c8b27c2603d125.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1488