Analysis
- user interaction
yes - max time kernel
39s - max time network
27s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/08/2026, 17:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TheChoicerVoicer_0-5-1 stable.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TheChoicerVoicer_0-5-1 stable.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target TheChoicerVoicer_0-5-1 stable.exe
- Size 201.6MB
- Sample260816-vn594aserf
- SHA256 b8de5c2a709a491568c73877cbc7729d581a064a8abe20f777d6c3ded918a344
- MD5 3bfe1b7014c778ee1f68d805c0bfd208
- SHA1 e11904ad82a27d324b2c530b8054056aa97b098a
- SHA512 d9f6d84f1f3e3b39edab1a9d63a9e9d60a3d78929856d78891b8e43b4e4f9c0e3c3ac56c9c3ad7ebadb500e12d0fb71b03e99fc4514d95c9acd2e77e5ea20467
- SSDEEP 3145728:HkeTiNLo4UgvdY7265EAjucwqaaWJcTzfiw+r3UT8tXauIekPEZ:EEiNLigI2i58eiw+rDXaeZ
- TLSH T128A8C003E2A3B0DCD46BF1349F7BAA72BA31B84911342D5A5596CB303E62E10677DF58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings TheChoicerVoicer_0-5-1 stable.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5140 TheChoicerVoicer_0-5-1 stable.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5140 TheChoicerVoicer_0-5-1 stable.exe 5140 TheChoicerVoicer_0-5-1 stable.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable.exe"C:\Users\Admin\AppData\Local\Temp\TheChoicerVoicer_0-5-1 stable.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:5140
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2940