Analysis
- user interaction
yes - max time kernel
17s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
12/09/2026, 10:14
Behavioral task
behavioral1
Sample
PaiamrPATCHER.exe
Resource
win10ltsc2021-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
PaiamrPATCHER.exe
Resource
win11-20260911-en
3 signatures
900 seconds
General
- Target PaiamrPATCHER.exe
- Size 1.3MB
- Sample260912-l9qbbser21
- SHA256 0bc0516ad89bee3ad9958e5929d348ee1356eeb5a5d789a7adb1dca41063c992
- MD5 3ae574008668e3bba563b8a84f15b896
- SHA1 ce1987a698a1d2a88ca6d9e92a1fae9e326daa54
- SHA512 dc496890cd26f284b6f3ad832b2be524051934bcbf558be22089002b3d40eba2dd4c45fea59959f86c43c1eaacee92c9b7dc6642f3fd3a00706e62d6d7fa53a4
- SSDEEP 24576:n0/wH2fMinErsWguWHbZhQWya2ETtyqfF8XAU4u6LRWEzvALfARFXGnVgVJJ:0W2frO1fW7/sa7YqrU4u6tBvALfuG2
- TLSH T17D552376FA04DE47D20A457C4DE3D785E07EBC48EA6319EAF4367A5E2A79780312304A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- AutoIT Executable 2 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral2/memory/4896-14-0x00007FF7AE390000-0x00007FF7AE66B000-memory.dmp autoit_exe behavioral2/memory/4896-15-0x00007FF7AE390000-0x00007FF7AE66B000-memory.dmp autoit_exe -
resource yara_rule behavioral2/memory/4896-0-0x00007FF7AE390000-0x00007FF7AE66B000-memory.dmp upx behavioral2/memory/4896-14-0x00007FF7AE390000-0x00007FF7AE66B000-memory.dmp upx behavioral2/memory/4896-15-0x00007FF7AE390000-0x00007FF7AE66B000-memory.dmp upx - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4896 PaiamrPATCHER.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\config.ini
- Size 11KB
- SHA256 c04d17ccc7c8c0d48ee4a63af7f031b95a8d6f88e96bb2cf047c2a5d1f804236
- MD5 f6d3cff8bff059da4d45c39b23076463
- SHA1 1215a335413869a29f3824a88674ccc58759df73
- SHA512 2253c9b68eb0c20474395d606747328b846534821a6aeb960c91b87dcab688b126b11a81974d3cd4cb1ab9f779cfc9355c363ef217390b59843ccb2ae21cba05
- SSDEEP 192:5GCcM5vzp0ecdFuCvcf/vcgBQENVBotrcabq2ctKNmm8hJIel:5oM5bp0ecdQCvc3vcgxNLaO2ctK0m8hL
- TLSH T13832C905C6D346B3CAA47E4E33B17E93273BF1CC85CE1351DB56853E2AD2408929BE59
- MD5 SHA1 SHA512 SSDEEP TLSH