Overview
overview
8Static
static
7CTS setup.zip
windows11-ltsc_2024-x64
1Setup.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...rd.bmp
windows11-ltsc_2024-x64
1AddressBoo...pt.sql
windows11-ltsc_2024-x64
8DBCreationScript.sql
windows11-ltsc_2024-x64
3Data/Addressbook.dat
windows11-ltsc_2024-x64
3Data/Addre...ersion
windows11-ltsc_2024-x64
8Data/Global.dat
windows11-ltsc_2024-x64
8Data/Global.version
windows11-ltsc_2024-x64
3Data/Indexes.sql
windows11-ltsc_2024-x64
3Data/Local.dat
windows11-ltsc_2024-x64
3Data/Local.version
windows11-ltsc_2024-x64
3Data/Main.dat
windows11-ltsc_2024-x64
3Data/Main.version
windows11-ltsc_2024-x64
3Data/RegionA.dat
windows11-ltsc_2024-x64
8Data/RegionA.version
windows11-ltsc_2024-x64
8Data/RegionB.dat
windows11-ltsc_2024-x64
8Data/RegionB.version
windows11-ltsc_2024-x64
3Data/RegionC.dat
windows11-ltsc_2024-x64
3Data/RegionC.version
windows11-ltsc_2024-x64
3Data/RegionD.dat
windows11-ltsc_2024-x64
3Data/RegionD.version
windows11-ltsc_2024-x64
3GlobalDBOb...pt.sql
windows11-ltsc_2024-x64
3LocalDBObj...pt.sql
windows11-ltsc_2024-x64
8MainDBObje...pt.sql
windows11-ltsc_2024-x64
3RegionDBOb...pt.sql
windows11-ltsc_2024-x64
3UpgradeManager.exe
windows11-ltsc_2024-x64
1en/ClickTo...es.dll
windows11-ltsc_2024-x64
1ka/ClickTo...es.dll
windows11-ltsc_2024-x64
1ru/ClickTo...es.dll
windows11-ltsc_2024-x64
8tr/ClickTo...es.dll
windows11-ltsc_2024-x64
8zh/ClickTo...es.dll
windows11-ltsc_2024-x64
8Analysis
- max time kernel
899s - max time network
559s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/08/2026, 13:10
Behavioral task
behavioral1
Sample
CTS setup.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral4
Sample
AddressBookDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
DBCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral6
Sample
Data/Addressbook.dat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Data/Addressbook.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral8
Sample
Data/Global.dat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Data/Global.version
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
Data/Indexes.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Data/Local.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral12
Sample
Data/Local.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Data/Main.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral14
Sample
Data/Main.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Data/RegionA.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
Data/RegionA.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Data/RegionB.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
Data/RegionB.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Data/RegionC.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
Data/RegionC.version
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Data/RegionD.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
Data/RegionD.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
GlobalDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
LocalDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
MainDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
RegionDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
UpgradeManager.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
en/ClickToShip.resources.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
ka/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
ru/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
tr/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
zh/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target en/ClickToShip.resources.dll
- Size 3.8MB
- Sample260816-qeptjaydma
- SHA256 414a6562e8c0d3a39e2b6fd3c0436303ef9fa9a70fc07b65c67bcd55292dfa33
- MD5 755e99dfc2dde7ce4feb5f435e27d464
- SHA1 77d9b008a477734c1b4b3a6fd3199f55e0c91f24
- SHA512 8214a125653e6902a5316b12121146a2d52186fc250fe423c2940f2d206860275ca42ad8f1db8d1d330a25e3f7b8185f8073d77fabf7678c7f1e4adefbc022e2
- SSDEEP 24576:8eaxeaaeameaHeaO+nbeaQeaBeaceaW/vea4eajeaGeapeaEea3eameaveaDeavF:HncwDp+nyCxKj+E9EFad4lrr
- TLSH T12D061903BA85D71ED06916324E76F5B50276FD486D69DC9BF236B39E2A333835E02702
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\en\ClickToShip.resources.dll,#11⤵PID:2120
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5984
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:3600