Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 02:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe
- Size 5.3MB
- Sample260905-db3j1adp2x
- SHA256 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1
- MD5 59c94a1ff8362f9872abc792da908a97
- SHA1 84f67164f9bb0a1f987ed5cd41d74641ee47249e
- SHA512 55fe2297fa4142ec79c167fa0bbaf12b04a9f3f58f721073d45ff9bcc3da89c0ef53a2c2960ae49dda08b511a68fae7f455c6d199207fd2c0cda4f04d146d86d
- SSDEEP 49152:0dc5nRTGbe2ZeyC0baQ0uVLmiTUc6Idaa/5uXW/xUrB/HJemNLYpWxUnqHAD3acJ:ye2CTLuZsaBBpTIAD3aACrFg
- TLSH T15946AE15A3E400A1E57BDB34CA26C733CAB1BC925735C20F4589E2462F739929F6F726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 5 IoCs
pid Process 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe 4172 81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe"C:\Users\Admin\AppData\Local\Temp\81546a316c455e2dfa94ced50685fd94be0ffb4d6b10905ba2d82e04ec77a5a1.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4172