Analysis
- max time kernel
899s - max time network
433s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/09/2026, 08:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SummitSense.exe
Resource
win10v2004-20260911-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
SummitSense.exe
Resource
win11ltsc2024-20260911-en
2 signatures
900 seconds
General
- Target SummitSense.exe
- Size 82.5MB
- Sample260913-kn4fdseq21
- SHA256 0a31859a8b494999d8f79ff1df9135581aa1b8bb58949a89200e1fee0cd13ba2
- MD5 fb9222a8e5f34c7eb58ecba910f18da1
- SHA1 af2ab1ae3588cc71e992303896a8a88df6cdd8bf
- SHA512 c0048ab116e5a0a4a17752463e5f054828701aba2db65d4cb8af598dd4b0987b9be8541fabbccd3c9f1fad082e9fa2ca7ce85e4c4b56844ae65f6dd56cd11b15
- SSDEEP 1572864:UPe/0PkYdV2h7DCPc+mRVBoXZkL3Cbe+FCv7oKn4lmBrjeK3vQbgRgXmft/u:f08Ydgh/CPcLXBAiL3SDcvEK6qx3HCX3
- TLSH T1F5182356E2FD00E8D5BBC0B8C6575617E7B2345513309BEB56A48A682F37BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 628 SummitSense.exe 628 SummitSense.exe 628 SummitSense.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 628 SummitSense.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\SummitSense\FC52ihahXHCXXb9K4kE15CKs0AGH2eE=\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\SummitSense\FC52ihahXHCXXb9K4kE15CKs0AGH2eE=\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
- MD5 b43c09fd1eab8feb0d9d87e6eeb8fa95
- SHA1 d8935765faf6e12d1d7f7e8b0f54f8e0f077a43c
- SHA512 1432fefe98029f475c0a53e0c551dd917713da346e9b7d5ee5ee5314fb43072cfb24f95b4e2ceef2f67d7f01084d398428b075bf09812a9f90f510f0a40bdfc8
- SSDEEP 24576:mhNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa7:mxKcdPHmMLYpX7T35/fPoGPpGFjztQcT
- TLSH T1F0453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\SummitSense\FC52ihahXHCXXb9K4kE15CKs0AGH2eE=\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 5a3e8766965f76a7cc0a3ba15db615ea009d4414b4cf4290c1cb59b211b8f68d
- MD5 a3de08b2853c72b4923558e1794f5272
- SHA1 358225bd1a2884e79e1688af4df3b53b65cb3d06
- SHA512 fd67ec2068a4cbe8e05ceac4e94a90649d2e0dd09171cd0a3ebd651a8aefe008bb1ab819fb489f5a3278b2ff083f5973b2ec91fd41639891ba57061c4bfa0ddd
- SSDEEP 49152:zJBarecoR28GPaM6YqVim/oBiEyBhocmue:LnlkRwiIoBi1BOh
- TLSH T1D5955A46B6AC40E9C07AD33CDAD7961BF27174152761A3CF23A0479E6F27BD00A7A361
- MD5 SHA1 SHA512 SSDEEP TLSH