Analysis
- geolocation tags
asiadelhiinindia - user interaction
yes - max time kernel
10s - max time network
11s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/08/2026, 21:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vip.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
vip.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target vip.exe
- Size 67KB
- Sample260830-1lyp5a1alg
- SHA256 e4adf86d9c0f1e402afe3f701b267c2e8d6b89ac29439b8a0bc36aead59f64de
- MD5 5071f7eded31b0381de4723217354491
- SHA1 24254bd3f4652fd750c0b10aae6d800bcdfa639e
- SHA512 1f28b56d53b2cb269cabd19274f7ac295d6b167748123ecb945712a8b0e54b42227028f22995c27e6fa56857810a9173b7dc3c7458b073d14e7781ed6595a323
- SSDEEP 1536:Qq/DN8JfMfAbAlp1xV8XYQTIHDJzqPAPUT0:Qq/DjAUlxuoQEjpPUI
- TLSH T128633A2AA3A103F8D429C17AC6F25503D331B80D23716BCF479095F98F175E9AF7A986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 840 vip.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 840 vip.exe 840 vip.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\settings.ini
- Size 382B
- SHA256 46d1ebf7117e0b953a2c81bb22c4a1383c24fec234a43d0ef8618d6b90639c3e
- MD5 60f9b4a5d4f471ddbf670cb254077bba
- SHA1 15a2e09e373ebe7569b3f0fb94b5880655a2b8d9
- SHA512 0ca9595268644a3c4dd534ec8fa9ebf1edbf6870a11a21d8671b6428012a5092d91dc6c7cf814f063b0104e26ff802003bfcd2ff958de377e88f236d3e1daf3a
- TLSH T125E0D8278F8F074E0054B09F7DE87903D4EB05994452AA404B4055E6DFEC5D1B0F5474
- MD5 SHA1 SHA512 TLSH