Analysis
- user interaction
yes - max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/09/2026, 17:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BytesLoader.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
BytesLoader.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target BytesLoader.exe
- Size 7.4MB
- Sample260908-we9ftswcqd
- SHA256 9a6feac016b8655c8dff0ac35a9cd34e035b017f130514489406736bc3231cf4
- MD5 556def5e7c2450402275d99a8eee8b57
- SHA1 1fe0e6ed14cbe71e0429000ede962f419685f17f
- SHA512 401f27a7fe06a354fb83bfdba2ee67b883d10e9b813b726d31c7987cd6176753c87f3bdfd3892c88610b32c8e603e1c16832c571c5be3bdd2c0155dabc73e9c9
- SSDEEP 49152:y5X0/UuhGSDM/Luvp6CP2Q1bcVPi3kaWBrEd9hrUAvS3cvmtncE2HtW/C:pMRSVpfP2Q1bcsyBYdnYc9HQ
- TLSH T12F76CF65A89C6BCCC179B27C61D34013A3F1BF941720DEDACAF0DE070DAF594B52662A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\BytesLoader.exe"C:\Users\Admin\AppData\Local\Temp\BytesLoader.exe"1⤵PID:1224
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5308
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1524