Overview
overview
8Static
static
3AngryVirus.exe
windows10-2004-x64
AngryVirus.exe
windows11-ltsc_2024-x64
Chernobyl.exe
windows10-2004-x64
Chernobyl.exe
windows11-ltsc_2024-x64
Commandos.exe
windows10-2004-x64
7Commandos.exe
windows11-ltsc_2024-x64
7HighHappy.exe
windows10-2004-x64
HighHappy.exe
windows11-ltsc_2024-x64
Knuckles.exe
windows10-2004-x64
6Knuckles.exe
windows11-ltsc_2024-x64
6Magellan.exe
windows10-2004-x64
Magellan.exe
windows11-ltsc_2024-x64
MasonChess.exe
windows10-2004-x64
7MasonChess.exe
windows11-ltsc_2024-x64
7MasonExln9.exe
windows10-2004-x64
MasonExln9.exe
windows11-ltsc_2024-x64
MatrixVirus.exe
windows10-2004-x64
7MatrixVirus.exe
windows11-ltsc_2024-x64
7PEEKABOO.exe
windows10-2004-x64
PEEKABOO.exe
windows11-ltsc_2024-x64
Smil.exe
windows10-2004-x64
Smil.exe
windows11-ltsc_2024-x64
Squidward.exe
windows10-2004-x64
8Squidward.exe
windows11-ltsc_2024-x64
7Stalin.exe
windows10-2004-x64
6Stalin.exe
windows11-ltsc_2024-x64
6Analysis
- max time kernel
2s - max time network
7s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/09/2026, 11:01
Static task
static1
Behavioral task
behavioral1
Sample
AngryVirus.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
AngryVirus.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Chernobyl.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Chernobyl.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Commandos.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Commandos.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
HighHappy.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
HighHappy.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Knuckles.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Knuckles.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Magellan.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Magellan.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
MasonChess.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
MasonChess.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
MasonExln9.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
MasonExln9.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
MatrixVirus.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
MatrixVirus.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
PEEKABOO.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
PEEKABOO.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Smil.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Smil.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Squidward.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Squidward.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Stalin.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Stalin.exe
Resource
win11ltsc2024-20260709-en
Errors
General
- Target MasonExln9.exe
- Size 77KB
- Sample260908-m4kdkafa58
- SHA256 622cce1035f8cdb86e362c430557e5c30f39a27bc53f7ccf201f51ba1bb3a965
- MD5 c30245645d088e11e6b57851f0e3b5c5
- SHA1 95853546db82c20be611714eaec91ab6a1e32bde
- SHA512 9979c6f19c7d48abc8eba634d5c4eb923b4c4c22882c78e6e7d77e633da8bbf1913a78ee02d4fcf64fb4a744c862d14b9c8ff08f23165187516c31b6d241f009
- SSDEEP 1536:14onCorR67Q3SaRO7IPqi/rhxdhsCJjmGasWhQcdQk/hO2o:v/RsQRIMPqizhxUqreRQk/hXo
- TLSH T1A0734B43B5D29CB2E5B21D311871CAA19A2FB9210E248E6B7794137E5F340D0AE35FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 MasonExln9.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MasonExln9.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeShutdownPrivilege 2868 MasonExln9.exe