Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 11:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
install_q2.0.16.exe
Resource
win10v2004-20260513-en
33 signatures
150 seconds
Behavioral task
behavioral2
Sample
install_q2.0.16.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target install_q2.0.16.exe
- Size 25.4MB
- Sample260903-naerna1yht
- SHA256 6b96dd3335f849b34dde1934dbe25f25de48244e2a3d044c522ce8644b851c0a
- MD5 5ff887d635caafc7b0857320ee5c47c0
- SHA1 1ea66c7c59cc9dabee4693bb0018c0d4189b4945
- SHA512 0bcf80b970ba4c1d90b61353bc1bdd437e650bf76b4f1b30c0d404747f9d01352e902f80d911d99892151fa91cafb05f361f0fc176102e558568cb5121877b12
- SSDEEP 49152:GKL3W0A0vr9cusmglhowk8s0nHQh6/q/5ci7CbaZk9t5BCHqO3eu/1fef/h5B46I:XjAIMaQi7kmeHh2yeH7rkfvVsX+NY
- TLSH T14A47E6117317E99DE1B753BA048B0F50F725E8B41970977323B8916C5FEAB0CBAB2924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 2056 4lXVfL.exe - Suspicious behavior: EnumeratesProcesses 32 IoCs
pid Process 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe 4884 install_q2.0.16.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Public\wlvOQY\4lXVfL.exe
- Size 135KB
- SHA256 676a2a7b94ca2f8ec76352ee656e4d075bb342bd7ad6efbc7c19c060001eace7
- MD5 9ec587911e501b73b7cf09f05d0ae17d
- SHA1 5b62403cc9a668c6e5c70ace177fd54fcc4c5936
- SHA512 d05468a472373815c46ccb46ec743408365d24982d10d8a23ee0036c28cf3dacd05d74304ef2d4b7118f91ff3f631f676b2e86ddee92a02cf988b0d3c6247847
- SSDEEP 3072:MmhXb5pgtiaRENEErO9Uj4OqhhUvB4BNgQaJ:MmjgtiayGErsUKh3To
- TLSH T1D0D38C2776A474F9E1778635C8511A1AE772B8760770CB9F03A442A62F237D19E3EF20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Public\wlvOQY\UxEnhance64.dll
- Size 640KB
- SHA256 32f504c67f75e535fbc302b68784877a90e3d6ad65573ce060f78e9a6db30351
- MD5 96fde734c8adc6c27e635308d1a1d540
- SHA1 38cdf52f3d52bf8dc8ad5d9329266f503f523c90
- SHA512 77b15d9c7bdf415bc9cff3f8bb2829f0a47ec00f65205559b3c8217eb6a9a457cb0c126dbe92c49d98faa0b8c70802456e598f7daf856f097b18a28e609e1215
- SSDEEP 12288:Wosa0Qi1HwnUsRTZYZIMIH/YmKB14YzdeQCIv6NMqilyxv4xjNqV3kQX7X:WTa0QKHReqZIMlcseQCIHfrPqxkgj
- TLSH T1A8D412B4679779F3E47656F4FE7292D22D000E343F03918F4B53604A06AD1F687AA3A6
- MD5 SHA1 SHA512 SSDEEP TLSH