Analysis
- user interaction
yes - max time kernel
16s - max time network
21s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-de - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-delocale:de-deos:windows10-ltsc_2021-x64systemwindows - submitted
27/08/2026, 21:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AQUA SERVICES RECON FOR R6S.exe
Resource
win10v2004-20260513-de
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
AQUA SERVICES RECON FOR R6S.exe
Resource
win10ltsc2021-20260513-de
3 signatures
900 seconds
General
- Target AQUA SERVICES RECON FOR R6S.exe
- Size 2.5MB
- Sample260827-1h674abb49
- SHA256 c483646f1db9fe17903ef7f9d24e237601978d0e2a95822853e49fc87987f7a3
- MD5 516ca4f6fc87b7609dc0fc018ec91957
- SHA1 7534bd559cb68d09c615db28e687c545d3fc7473
- SHA512 01e16b92fabcffc50b3293b9072a0537a2b96a62b1bc07ecb28c2d03fa4b4931e6a6df5e73f13368370cde91629ec182dff748f72b14da684844d9457bb6534d
- SSDEEP 24576:ljZhmWcUs8EnqneJqexPvAzoCVCJBTvNu/3fzFfo0PKKKKewQi3DdQ80NM:l5pAnqnewedhpBrNunpfHKKKKew
- TLSH T151C57E73A26BF2C4D36B4172F1991E0DD224B8E53B3A9C9F380591699D633CAF963305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4668 AQUA SERVICES RECON FOR R6S.exe 4668 AQUA SERVICES RECON FOR R6S.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4668 AQUA SERVICES RECON FOR R6S.exe 4668 AQUA SERVICES RECON FOR R6S.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4668 AQUA SERVICES RECON FOR R6S.exe