Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 13:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Etheral_patched.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Etheral_patched.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target Etheral_patched.exe
- Size 4.6MB
- Sample260905-qvtsesdk2s
- SHA256 4fdb0bc80f071d629f07199bb9688efd2ecd1a9cdaf8fdd3e678eb7921d0c5ea
- MD5 2688916ee75b6e5521fa9146b0339701
- SHA1 192a2710f1e3e9a2e8174baba7892d8c46839e6a
- SHA512 5d8b4fd5151262ab17238225cf15657bd9d4752483e24f5a073a5168a49f8ebba9058ce64bfa2685f348ff961ad6ca280f43f5aa9922906fd961dbd9a4a21275
- SSDEEP 49152:SXuPeiu9ryjkRDG7iD2dqEEGTBpE8tKan+TFcF8bdyj:Quu1ywRDIBdNN+8/
- TLSH T18A368BA1969C8B9DF06AB038C1935617A7F1BC0D2321DFCB96D09DA70E1F6D0F57A209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5468 Etheral_patched.exe 5468 Etheral_patched.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5468 Etheral_patched.exe