Analysis
- user interaction
yes - max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/09/2026, 15:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WolfteamLoader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WolfteamLoader.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target WolfteamLoader.exe
- Size 204KB
- Sample260903-sjs3vsar5x
- SHA256 0f559d4cc2d8fb6c75f4d5560580e289c0d670758a04df18e35fddbb2e66c63c
- MD5 cac5b4c24b126a046b5d98fbf4f5783e
- SHA1 cf0e35269240317d75d9d22f72f9fe4d90c012d6
- SHA512 19d935b027d938cf470d49cbfeee1798f12429624e4b6e55e9bbaeb9e818c3811b4e0f2e14e4cc97c74803dab906e3477a16ea2b9faeed890b9ea8b1300ccd98
- SSDEEP 3072:pqeXA/4yIbHkNPN+6H6xCYOigUE2652JNEAeyIhmwmVoqP5syPIJHgZ:pvdHkNFdaxmMEWJ5F
- TLSH T1C8144B06A3AC417BE2BB8A7CC9A14942EB7278154B71F7CF175049BA1E637D09E39313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file 35 IoCs
flow pid Process 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe 21 4980 WolfteamLoader.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4980 WolfteamLoader.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Wolf2016\wolf.sy_.part
- Size 116KB
- SHA256 d7de79f585d528675c060ee21953acee2cc95aa69b6c11cb5d1154ff81e2f8b2
- MD5 9fcd2beb2888d9484bddde9bf71f127e
- SHA1 580e043e08277d8afe5eaeb02204b4d934685050
- SHA512 9d82c10e3887523432834529b81aa8f9d6aee21c8c7d8760d4be888e6d305ffabf770ac61b980d4dc5ab198c8dd9587de28dffbef0b6acdd7f5a34de040aaa32
- SSDEEP 3072:OcowTnMbt8BQUDbUSxhBqoTBlqRprMeKnnC0y:QWMwQimWtBnC0y
- TLSH T14BC33A63B40081B2CCD621F0195EF139A6FED1600B2557E767491BEAEDD1AE25E3C38B
- MD5 SHA1 SHA512 SSDEEP TLSH