Analysis
- user interaction
yes - max time kernel
30s - max time network
31s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 09:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
main.exe
Resource
win10v2004-20260513-en
1 signatures
30 seconds
Behavioral task
behavioral2
Sample
main.exe
Resource
win10ltsc2021-20260513-en
1 signatures
30 seconds
Behavioral task
behavioral3
Sample
main.exe
Resource
win11-20260513-en
3 signatures
30 seconds
Behavioral task
behavioral4
Sample
main.exe
Resource
win11ltsc2024-20260709-en
3 signatures
30 seconds
General
- Target main.exe
- Size 449KB
- Sample260910-ldhlls1dla
- SHA256 c57ea97c70c9ba2056f94f035ec23348ae3921f63af35368be785f8c26f91c6c
- MD5 34bb3e0a13a3a240343c5d939a70a79a
- SHA1 3e87e909b47d12ce36cf05714d961fce1d1b5726
- SHA512 5ba349954e9b46aa158984c8516941ec7984475f469acfe2557aa2af3d667f5bb21e34af5341f000d43089f579d4fe4c3e03957894ab8064a6614199c7fa3f33
- SSDEEP 6144:yyU06SUwJUagdPOLXw/5FJaD1Xx0Oj9XIZbjNUFxOHkvA6RC:ZU0fJpgYLXDDNO+F42A6RC
- TLSH T1ABA44B7BBB81DCE9C647C1B06AAB86687734FDA40621A31715D422317F13AE06FCD786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Creates a file in the Startup directory 1 TTPs 2 IoCs
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winslop.exe main.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winslop.exe main.exe