9af3c411b4196b76f9066fad5640bf1e715f09b975d771de157c53521ffa0b48

Resubmissions

19/09/2026, 22:09

19/09/2026, 22:06

user interaction
yes
max time kernel
118s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/09/2026, 22:06

Target
Rainbow_colorbot_clean.exe
Size 1.4MB
Sample260919-11e7bsty5k
SHA256 9af3c411b4196b76f9066fad5640bf1e715f09b975d771de157c53521ffa0b48
MD5 e49da98e04e606344c4666d38dd2300a
SHA1 6ef2596ecf8e16bd1b4fda6818aea6eadec04dcc
SHA512 9002e0a5a5b36948cd2373684f4c489583734951fc2d4b89dd71166d81709119e6aa33d69d3d236758b60aafb148df582e5d6a45b31fea55175b6532bb6a669c
SSDEEP 24576:iuvRsp4+Efb20L6AnIVvxB8BK1tyFDG4OIKkM2NzL:ZvqvIPL9n4wLOIJL
TLSH
T10165BE5AF3EA47AAD063863D9F90E533A1B07C11271037DB7B854A2D2F676C44EB071A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3208	Rainbow_colorbot_clean.exe

C:\Users\Admin\AppData\Local\Temp\Rainbow_colorbot_clean.exe
"C:\Users\Admin\AppData\Local\Temp\Rainbow_colorbot_clean.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3208

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4644