Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/09/2026, 13:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
077da46ddd4a0ef891926d7666667d3f837e4ef6a76c05bf61e0ff1b8ea48e2c.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
077da46ddd4a0ef891926d7666667d3f837e4ef6a76c05bf61e0ff1b8ea48e2c.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 077da46ddd4a0ef891926d7666667d3f837e4ef6a76c05bf61e0ff1b8ea48e2c.exe
- Size 122KB
- Sample260901-qt7ynazele
- SHA256 077da46ddd4a0ef891926d7666667d3f837e4ef6a76c05bf61e0ff1b8ea48e2c
- MD5 3da54a64d98decc62e035cc18db2e03e
- SHA1 820ada8f026a448dcb88f288197ebaa8ed3673ea
- SHA512 46890d64272a428b6f4d2d51ba55018040d5857d7efea24c153063e0ae76a95623b702697744288962c975354bf1a8a43235661a7c2f853f1da09ba5eb198e64
- SSDEEP 1536:4D3jKv4yPEwnPAg+W502YUe4gHFu7VmPZA//XjU6RpXBlMPZI6pvuJ4:QpyRPGOlteXFuMPK//XjU6RpXAq6puJ
- TLSH T19CC32A17BAA8017DE2F6D67DD9E28812EB727C49479167CF07804DA74E326D0EE39702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\SystemUpdate = "C:\\Users\\Admin\\AppData\\Roaming\\Microsoft\\System\\svchost1272.exe" 077da46ddd4a0ef891926d7666667d3f837e4ef6a76c05bf61e0ff1b8ea48e2c.exe - Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 discord.com 2 discord.com
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\ransom_debug.txt
- Size 4KB
- SHA256 d077c5562904c18cadea07c8b1d16b75f0e6c545b38d5da06b3cc9e42aba6ab0
- MD5 af71bd62695d0272eac7b4f9251e0341
- SHA1 daa254cd3719c368425a826b8142ef082ae0ee5f
- SHA512 e8a52db6e300b18349a28908bb0ed68273af69dec2d54377be87a3ce15cb0762af171211680ec647291702b26b39d42b132a31395d6bcde7f736c1b420823f72
- SSDEEP 24:IEkKJ8j8XGGGGGGGGGiiiiiiiiieeeeeeeeeLjmLjmLjmLjmLjmLjmLjmLjmLjmC:FZejEjEjEjEjEjEjEjEjR
- TLSH T12691D1B55ED25D1A6FF3F4FD212A52D0880B0F33CCD69D2688276524E7AC445D03BBA2
- MD5 SHA1 SHA512 SSDEEP TLSH