Analysis
- max time kernel
148s - max time network
117s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 11:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d3b0a690020bfcb2aaacd76386e2611cddeb6d5bddfefcffa64fa8b607819caf.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
d3b0a690020bfcb2aaacd76386e2611cddeb6d5bddfefcffa64fa8b607819caf.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target d3b0a690020bfcb2aaacd76386e2611cddeb6d5bddfefcffa64fa8b607819caf.exe
- Size 1.1MB
- Sample260903-m5hlcsvhra
- SHA256 d3b0a690020bfcb2aaacd76386e2611cddeb6d5bddfefcffa64fa8b607819caf
- MD5 e4e6a744093f9b0c2b8b23ddd00fefb9
- SHA1 c295c7e61b6190ad745bf05fdf64d500d023a43c
- SHA512 68a8864d76a3d22ece21de838bdb46553e564d7fc7d4e3d3138e0b23068e52c39f4f05dbeaecdb24cdf6dfc5a875f221d83961871ebad70b5519d2877cba5d06
- SSDEEP 6144:5m2icmlnJvLmY/2lfq/RBJtxwYMifc3ViTBpqLD2OAU7HmIKtfDgd85iTJEtwn8t:sD/IIC9W0/wsWE/xcymvdB
- TLSH T12F35835872BA9F09E47D8FF906660544D3F96A2B52BCEA0D9DF3F4CA22F17804941E07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5796 wrote to memory of 5440 5796 d3b0a690020bfcb2aaacd76386e2611cddeb6d5bddfefcffa64fa8b607819caf.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3b0a690020bfcb2aaacd76386e2611cddeb6d5bddfefcffa64fa8b607819caf.exe"C:\Users\Admin\AppData\Local\Temp\d3b0a690020bfcb2aaacd76386e2611cddeb6d5bddfefcffa64fa8b607819caf.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:5796 -
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exedw20.exe -x -s 8402⤵PID:5440
-