Analysis
- user interaction
yes - max time kernel
28s - max time network
20s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/08/2026, 10:20
Static task
static1
Behavioral task
behavioral1
Sample
NoEscape.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NoEscape.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target NoEscape.zip
- Size 616KB
- Sample260827-mdfbxssgra
- SHA256 47f6d3a11ffd015413ffb96432ec1f980fba5dd084990dd61a00342c5f6da7f8
- MD5 ef4fdf65fc90bfda8d1d2ae6d20aff60
- SHA1 9431227836440c78f12bfb2cb3247d59f4d4640b
- SHA512 6f560fa6dc34bfe508f03dabbc395d46a7b5ba9d398e03d27dbacce7451a3494fbf48ccb1234d40746ac7fe960a265776cb6474cf513adb8ccef36206a20cbe9
- SSDEEP 12288:1PQuO1JLx2auoA82iqOxdOc7XPkmpOw6mqc5m937hnTMktj1H:1PVqJx2auYqw7dOw6mql3nNBd
- TLSH T1C7D4238993CDE90485BCBA49BE077DE1FE5466E73139EAAE6047471538733C812F3262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\NoEscape.zip1⤵PID:4124
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3936