Analysis
- user interaction
yes - max time kernel
46s - max time network
43s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/08/2026, 02:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SpoolColorLPE.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
SpoolColorLPE.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target SpoolColorLPE.exe
- Size 6KB
- Sample260823-cm3tgadn31
- SHA256 c6e865165ea384164b0b8aee9c370836b05fa87963f812c4541ad32b56dafa89
- MD5 deb7b493db572479ef1627bc304097d1
- SHA1 3fd045b7ea85717f74e51c7aad793fd288aff7b4
- SHA512 74c6fb18116d9eb4ac57b4e420ea04e2553b1b0c340077c23efce5c8ed668daaef5585150350c79b6d8630408262e75079718b36515d711cbfdf281091cf5cb3
- SSDEEP 96:L+y5sS4snYgCp6WYbrTl6kdHWylOI8MDTDL/Lw0E:S0d1HCkWwhd86/s
- TLSH T1F9D12C42BBF80924F9FF1BB5AEB243501A75BD626F36D64F0584008E6C71B519A32B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\System32\spool\drivers\color\22654767-8cd2-4b38-8ad1-b4932216e2f8.tmp SpoolColorLPE.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\SpoolColorLPE.exe"C:\Users\Admin\AppData\Local\Temp\SpoolColorLPE.exe"1⤵
- Drops file in System32 directory
PID:4716
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4956