90dd0b6001867cce64ed0be7e68734675b87f2007d8c100b3c328294800454b1

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 10:24

Target
9L5 MACRO.exe
Size 110.7MB
Sample260825-mft8vsgg34
SHA256 90dd0b6001867cce64ed0be7e68734675b87f2007d8c100b3c328294800454b1
MD5 aeaf6d77cd2a60900444617fd2ec3a15
SHA1 47135d42245ac13e797da375374e81756c241b8d
SHA512 101051ddc3054a53fbf946a896b2c2fbca41cffcb204da2d331f1c09a0e56d5b2febeea5f7a3085c27ef80d8eb2f3dfe2aaedc0d7320dd7a382159e5c63502d5
SSDEEP 786432:iGwp8xFd+U4DVOK33ZiSOH0q4DlpFcz7yK95a9X6KPu5NY5oPUkB:iTKFdX0Zi0ySK3a9X6KPubYKskB
TLSH
T1E7487C1163E86E45E23B8278977386A1D675BC525311D2CF0084FD4A3F73BD2BA363A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3456	9L5 MACRO.exe

C:\Users\Admin\AppData\Local\Temp\9L5 MACRO.exe
"C:\Users\Admin\AppData\Local\Temp\9L5 MACRO.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3456