Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/08/2026, 09:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe
- Size 3.2MB
- Sample260826-lsbrlscf45
- SHA256 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db
- MD5 96048d9416c67163ab336555f4817776
- SHA1 82b80c3c4d111ce7ac68a534b5b6d23176dd10e6
- SHA512 74785211b1fc8c6c3e9d939197f56ff5bdc91652da1ae38e6fe0e8be6dc85d7a326cd86311b9a2c17b504960284dc29f831de96e620a83f75f79c0e06e6300a1
- SSDEEP 49152:NpJv71F8sWUOsXa7f3edKynSgS5qbpkW/ApgIM1LtAhNcG70WbjGOH3pIxvI8+UU:ljNXar465qbpkW/ApgIM1L8HHuvImC
- TLSH T102F5170B22A401ECD17B92789606DAC6E6B5BC4D13219ACB02903F651E376FD7F79633
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 26 IoCs
pid Process 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe 1320 580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe"C:\Users\Admin\AppData\Local\Temp\580876c2eeb710ec3e17b9101fc60ff2ba88f699ff49d1ba19f3c6111110b5db.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1320