Analysis
- max time kernel
164s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 23:54
Behavioral task
behavioral1
Sample
18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe
- Size 5.6MB
- Sample260910-3x99eaztaw
- SHA256 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a
- MD5 4d136215c931e5723f2098d968fbca74
- SHA1 402cf00e6e68525c1a8e44387508d623eb00373b
- SHA512 3ba5dae4816977442621b1577efb95d4646eb76172503a2f07f1378fbbb30c02d1c5a3fa7a3bec120d7dc9b74d7b9a522848fd7895e5d319204ab45a1ce00727
- SSDEEP 98304:6Kepnr/UQzxYxuXZFHGaprMur6nSneUIl8vrYqnSxVo7pcES94xWvFbjk1N4qhtD:659/UQtDZFmaVMue+el8TYqnSPQpcESs
- TLSH T1EB46332A4F91A499CE3C54798744E9EDF6E82CB9CF728C993F783648FE686418F50C44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1408-0-0x00007FF6C3840000-0x00007FF6C542E000-memory.dmp upx behavioral2/memory/1408-5-0x00007FF6C3840000-0x00007FF6C542E000-memory.dmp upx - Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1408 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1408 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1408 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1408 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe 1408 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe"C:\Users\Admin\AppData\Local\Temp\18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1408