Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 09:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AAUY&&.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
AAUY&&.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target AAUY&&.exe
- Size 6.6MB
- Sample260903-lm7bbstfmc
- SHA256 3fcb2d7ae59beb45278a962ca8d061f097e6cb6c81a1f2846d0614fecb82d99c
- MD5 880eae9d32c6a52f274f1c4a9abb1967
- SHA1 d11f814bb056b443b596107863ae646d6fb77a88
- SHA512 11977aa2f408292fca5f3e3cf466531eb2d91156193403ce554e3554cc78a77df5dd3974eb5d019ca5e396394e6656e0c96916c9fd038a7ba4a96bc94d4e4d53
- SSDEEP 49152:mKRKeOmkd+u4jgxBBjHQtDgDbA9ZOKlM6oCmNZqjhzz93o2VFQau7AMBeF0xxBSh:mK4Z3Vj0M6of49CdDquUWKp5
- TLSH T1B8668E1273948727C49F9A35F060452AA373F80A6322F3DB5780BABA7E677C15D147E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 raw.githubusercontent.com 6 raw.githubusercontent.com - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2060 AAUY&&.exe 2060 AAUY&&.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2060 AAUY&&.exe