Analysis
- user interaction
yes - max time kernel
63s - max time network
69s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
31/08/2026, 10:18
Behavioral task
behavioral1
Sample
GTA_VII_CYBERLEEK.zip
Resource
win10v2004-20260513-en
1 signatures
900 seconds
General
- Target GTA_VII_CYBERLEEK.zip
- Size 22.2MB
- Sample260831-mbxhesstdz
- SHA256 1a062a9d36961ded297c0140a0eb934a5c3f16346207185918d74893496b48db
- MD5 f5bb5da335f551b06f4b4d95851872b9
- SHA1 ba2f7ac36748109aefaa81c932b39af1372c10ed
- SHA512 923a709c943c4af868bfa9d1b0bc38089146c596ca242679e565dfa53e440b4ebf8b73e4081f520568dbf07c7c4227d4b4e69636366c8cf8b16277aa14fe0e5a
- SSDEEP 393216:YWlUvvi/ujERE97A7mZ9ATpJFiQnTD86N1baIomKDkTDkW/A7nLhTYzTe0YHEl0J:5UvvimgRGAOqTZiQ39Fom5/U1TY+J8K
- TLSH T1C63733DCE59EA580F036AA703ADA4BC596307DA51096C34F0A352B490DB76DCEF4BB1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3784 GTA_dev_2-0-4_cyberleek-installer.exe
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\GTA_VII_CYBERLEEK.zip1⤵PID:1816
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1892
-
C:\Users\Admin\Desktop\New folder\GTA_dev_2-0-4_cyberleek-installer.exe"C:\Users\Admin\Desktop\New folder\GTA_dev_2-0-4_cyberleek-installer.exe"1⤵
- Suspicious use of FindShellTrayWindow
PID:3784