Analysis
- max time kernel
149s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 07:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
something.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
something.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target something.exe
- Size 3.4MB
- Sample260831-jpp4qazvbx
- SHA256 f2656922127658f31165d50108c85d945f436008048d897c99dcba8b193aa0b8
- MD5 76014e141076dabdd9e6c71e7744c01b
- SHA1 b5fdef19a53de04f81eb960a9de3b9cb68639fe9
- SHA512 bf5dfad5134fe5e185e4e611afcdf5b5b157bd0b5a8efe2aa4ebd31166d8261878dbae6ea1573da01c28bb54363ac8a2b9fb061c0be38916090237605769979a
- SSDEEP 49152:LARLx6etvvY/G9JrnBIfVcQutcoBaAt5+:s4/4/Qu9B
- TLSH T197F5BF63F75111F9D9769038CAA2932BF336B454072183DB63989A296F43BF01F76B84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{943FC95B-76F8-41D4-98CF-1B4B2A67CB70} something.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe 6040 something.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6040 something.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 6040 something.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 6040 something.exe