Analysis
- user interaction
yes - max time kernel
36s - max time network
38s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/09/2026, 16:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ape.exe
Resource
win11ltsc2024-20260709-en
3 signatures
900 seconds
General
- Target ape.exe
- Size 41KB
- Sample260909-tmpqaagm3y
- SHA256 a4b9493d265c4c1d72fabca61a42c25b5072f14a8a52b5c2e737fc4a171d9286
- MD5 4af2cbb40498503a4ff3ce11b246a46d
- SHA1 2d191644dcfc62d1cff644cf3d00d2c5a815192a
- SHA512 442de4d5dbf10a6dbd4e3e48ca00b832108fda24ed52915c61f69dd4279365895ebeffbbcaa01a9dd0008c69b0fe4d40c612b4339a4006f55b5feb59f9834e15
- SSDEEP 768:NBTVKE2ZtytjS2aD6krjny4LjO4Akaf45xvT4fi3f:DTVvrjfaD6gjny4LjOnA5xbGaf
- TLSH T13C13B615CE9A916BD32A9E74DD334805ED63BC869BF4A5CF63405CDA0C72AD88B3D702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 raw.githubusercontent.com 2 raw.githubusercontent.com - Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\wallpaperctl\\wp_240747156.jpg" ape.exe - Modifies Control Panel 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Control Panel\Desktop\WallpaperStyle = "10" ape.exe Set value (str) \REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Control Panel\Desktop\TileWallpaper = "0" ape.exe