4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88

Login
Reports

Overview

overview

Static

static

cone.exe.zip

windows10-2004-x64

cone.exe.zip

windows11-ltsc_2024-x64

2to1ep.exe

windows10-2004-x64

2to1ep.exe

windows11-ltsc_2024-x64

main.pyc

windows10-2004-x64

main.pyc

windows11-ltsc_2024-x64

4363463463...63.exe

windows10-2004-x64

4363463463...63.exe

windows11-ltsc_2024-x64

Synaptics.exe

windows10-2004-x64

Synaptics.exe

windows11-ltsc_2024-x64

TsarBomba.exe

windows10-2004-x64

TsarBomba.exe

windows11-ltsc_2024-x64

cobaltstri...de.exe

windows10-2004-x64

cobaltstri...de.exe

windows11-ltsc_2024-x64

ed01ebfbc9...aa.exe

windows10-2004-x64

ed01ebfbc9...aa.exe

windows11-ltsc_2024-x64

random.exe

windows10-2004-x64

random.exe

windows11-ltsc_2024-x64

Resubmissions

06/11/2026, 14:36

04/11/2026, 21:57

03/11/2026, 22:02

03/11/2026, 21:57

03/11/2026, 21:50

03/11/2026, 21:48

26/10/2026, 02:22

24/10/2026, 06:44

23/10/2026, 16:14

18/10/2026, 12:47

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 15:46

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

cone.exe.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

cone.exe.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

2to1ep.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

18 signatures

150 seconds

5fdb6df778631818165110294c620890 a099505f8ec3a0db21363b9cf5631705 c9e9a8ce47eb529601c1bb8d8883edb4 discovery execution vidar xworm persistence privilege_escalation rat revoked_codesign stealer trojan

Behavioral task

behavioral4

Sample

2to1ep.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

21 signatures

150 seconds

discovery downloader execution donutloader remcos svcstealer xworm installer loader persistence privilege_escalation rat revoked_codesign stealer suricata trojan

Behavioral task

behavioral5

Sample

main.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

main.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

4363463463464363463463463.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

19 signatures

150 seconds

prueba defense_evasion discovery execution donutloader lumma remcos rustme solaris_loader xworm installer keylogger loader persistence rat stealer trojan

Behavioral task

behavioral8

Sample

4363463463464363463463463.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

22 signatures

150 seconds

backdoor ddns default defense_evasion discovery execution asyncrat cobaltstrike deerstealer quasar risepro persistence rat spyware stealer trojan

Behavioral task

behavioral9

Sample

Synaptics.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

45 signatures

150 seconds

adware backdoor 2ae1b557d5f1fe6ab80db53367735250 credential_access defense_evasion discovery execution metasploit phorphiex redline vidar xred xworm infostealer installer loader persistence pyinstaller rat revoked_codesign spyware stealer trojan upx worm

Behavioral task

behavioral10

Sample

Synaptics.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

18 signatures

150 seconds

backdoor ddns discovery execution quasar xred persistence spyware trojan upx

Behavioral task

behavioral11

Sample

TsarBomba.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

80 signatures

150 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gh0strat hiddentear jlocker lockbit masslogger modiloader redline rokrat sectoprat umbral valleyrat_s2 vidar vipkeylogger xorist xworm impact infostealer installer keylogger persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral12

Sample

TsarBomba.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

60 signatures

150 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat gh0strat hiddentear jlocker lockbit masslogger modiloader redline rokrat sectoprat umbral valleyrat_s2 vidar vipkeylogger xorist xworm impact infostealer installer keylogger persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral13

Sample

cobaltstrike_shellcode.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral14

Sample

cobaltstrike_shellcode.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral15

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

22 signatures

150 seconds

defense_evasion discovery execution wannacry impact persistence privilege_escalation ransomware spyware stealer suricata worm

Behavioral task

behavioral16

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

22 signatures

150 seconds

defense_evasion discovery execution wannacry impact persistence privilege_escalation ransomware spyware stealer suricata worm

Behavioral task

behavioral17

Sample

random.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

34 signatures

150 seconds

fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey vidar persistence stealer trojan

Behavioral task

behavioral18

Sample

random.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

32 signatures

150 seconds

fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey vidar persistence stealer trojan

Report Analysis Logs

General

Target
cone.exe.zip
Size 43.9MB
Sample260905-s73l7svsf1
SHA256 4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88
MD5 5e4a348e89afb91e6ae698f3104f7b47
SHA1 1ea7e4faa29e2803f50165f63815003fe22b8cbd
SHA512 a4282f90cff85a5802c551c770b2e849ef745bbde8c707d6878c841102d98bdcfe86c014df2acf34fb4471713d990265d0eaaf129dd560898785b8e7ebc53666
SSDEEP 786432:aGUqxoNIwFhSVPEgA5PjIXom0Fk/JK2a8Zq9HdQFaybEdhPm3dutgEXzu94Pa2SJ:aDySIOSVA7IJQk/JK2amQkTwdhPt1S2e
TLSH
T1E8A733667F1BF7D8F0499FA93C60C196559BC6C9834B0C28CFA3C720EDA78E66641478
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\cone.exe.zip
1⤵
PID:3020

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads