Analysis
- user interaction
yes - max time kernel
16s - max time network
13s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/09/2026, 12:32
Static task
static1
Behavioral task
behavioral1
Sample
3uTools.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3uTools.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target 3uTools.exe
- Size 24.5MB
- Sample260916-pqv91sysgx
- SHA256 8b59ec058731926dae3e2a381b6103851acc46196f6512029ce90f3dfdd3707e
- MD5 bdab1f92546731a48eefaf7782c0cfa7
- SHA1 5b7c520b9c65cdbf6cb88d41f3e2e4fc2f3c8412
- SHA512 5a29a4e420aebb6a96ec0ab14b9f5128f32e0d4fb54b5c007218a22f303d218fd766529e8ff6ab255fa022dd123d87c7b19d0693ef8df2df21793fc16e3565b0
- SSDEEP 196608:/uhuUgU+QfYwfdnBOdN78hbsmWGeeWEl6wTA1EUYLad:JmVfYunGt8hbPp81TYLad
- TLSH T1AB47B40AE67581E1D076D47DC253AA2BFC32385AD3346BE35A55EF171F2A3D0A939B00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\3uTools.exe"C:\Users\Admin\AppData\Local\Temp\3uTools.exe"1⤵PID:2104
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4032