Analysis
- max time kernel
150s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/08/2026, 09:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WAELSTOW-windows/WAELSTOW.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
WAELSTOW-windows/WAELSTOW.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target WAELSTOW-windows/WAELSTOW.exe
- Size 104.0MB
- Sample260820-k31m2stbpg
- SHA256 f35fd1bcafdc0bfb85456c6069e74815744fbb2e5d8883439d34d6c7589942c4
- MD5 5316c6174baec454daf2fee95ff9ef24
- SHA1 53c5e3853c8b7640f86a971bc080ce8d256f0779
- SHA512 a93ec50600abec65c1d9d9c8f9ad6072712ffc0ea354ad78eb71d2995c24a85fb4c544c54c02bbe55e75bdc84ee08bf1a39342c9c64f745a97b1ac4de90d7306
- SSDEEP 786432:1cmyjf1VYlSXxQnpJ9c7YUd4/KpRaFuQmhzyb4pbMAM2M8:1cmuf1VYlShQpdUsKpBC4pbMAM2M
- TLSH T1C2383B53F27370ECC56BC13492DBA633BA73B85951386E6AD6A0CB742F21E50632DE14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings WAELSTOW.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2608 WAELSTOW.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2608 WAELSTOW.exe 2608 WAELSTOW.exe 2608 WAELSTOW.exe