Overview
overview
8Static
static
7CTS setup.zip
windows11-ltsc_2024-x64
1Setup.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...rd.bmp
windows11-ltsc_2024-x64
1AddressBoo...pt.sql
windows11-ltsc_2024-x64
8DBCreationScript.sql
windows11-ltsc_2024-x64
3Data/Addressbook.dat
windows11-ltsc_2024-x64
3Data/Addre...ersion
windows11-ltsc_2024-x64
8Data/Global.dat
windows11-ltsc_2024-x64
8Data/Global.version
windows11-ltsc_2024-x64
3Data/Indexes.sql
windows11-ltsc_2024-x64
3Data/Local.dat
windows11-ltsc_2024-x64
3Data/Local.version
windows11-ltsc_2024-x64
3Data/Main.dat
windows11-ltsc_2024-x64
3Data/Main.version
windows11-ltsc_2024-x64
3Data/RegionA.dat
windows11-ltsc_2024-x64
8Data/RegionA.version
windows11-ltsc_2024-x64
8Data/RegionB.dat
windows11-ltsc_2024-x64
8Data/RegionB.version
windows11-ltsc_2024-x64
3Data/RegionC.dat
windows11-ltsc_2024-x64
3Data/RegionC.version
windows11-ltsc_2024-x64
3Data/RegionD.dat
windows11-ltsc_2024-x64
3Data/RegionD.version
windows11-ltsc_2024-x64
3GlobalDBOb...pt.sql
windows11-ltsc_2024-x64
3LocalDBObj...pt.sql
windows11-ltsc_2024-x64
8MainDBObje...pt.sql
windows11-ltsc_2024-x64
3RegionDBOb...pt.sql
windows11-ltsc_2024-x64
3UpgradeManager.exe
windows11-ltsc_2024-x64
1en/ClickTo...es.dll
windows11-ltsc_2024-x64
1ka/ClickTo...es.dll
windows11-ltsc_2024-x64
1ru/ClickTo...es.dll
windows11-ltsc_2024-x64
8tr/ClickTo...es.dll
windows11-ltsc_2024-x64
8zh/ClickTo...es.dll
windows11-ltsc_2024-x64
8Analysis
- max time kernel
900s - max time network
477s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/08/2026, 13:10
Behavioral task
behavioral1
Sample
CTS setup.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral4
Sample
AddressBookDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
DBCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral6
Sample
Data/Addressbook.dat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Data/Addressbook.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral8
Sample
Data/Global.dat
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Data/Global.version
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
Data/Indexes.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Data/Local.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral12
Sample
Data/Local.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Data/Main.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral14
Sample
Data/Main.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Data/RegionA.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
Data/RegionA.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Data/RegionB.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
Data/RegionB.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Data/RegionC.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
Data/RegionC.version
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Data/RegionD.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
Data/RegionD.version
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
GlobalDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
LocalDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
MainDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
RegionDBObjectsCreationScript.sql
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
UpgradeManager.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
en/ClickToShip.resources.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
ka/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
ru/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
tr/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
zh/ClickToShip.resources.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target ka/ClickToShip.resources.dll
- Size 3.9MB
- Sample260816-qeptjaydma
- SHA256 93c228b619f86c0f9791eaef34bcca3088d0f0c4a3767bc06a4579b715b92147
- MD5 9bc54f7640b60f8cd4557975957492d4
- SHA1 208af18ade0b5e66cf767edd93c2ba5baa0d2bc5
- SHA512 b86b0d6d4800b40e1941e400c12658e84de8d60c39ff4c1923de39ab8e6d1add49fcd3834e2ff93fecf9950f12f3a0603fe0be026d6ccae317a99ba8db4ae33b
- SSDEEP 24576:Gea1ea1easeaIeaPe+eaoeaUeavea3eaveaHteaSeaueaceaoeaIeajeadeaNea:pp9WikeR8IDbZPekAu4n9r
- TLSH T1221628027AC5D71ED46906320A76F6B50236FD49AD68D8AFF236B39E39333435E12712
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ka\ClickToShip.resources.dll,#11⤵PID:4848
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2684
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4344