Overview

overview

6

Static

static

3

Anti Kick Stable.exe

windows10-2004-x64

6

Anti Kick Stable.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    145s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/09/2026, 21:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Anti Kick Stable.exe
  • Size 5.3MB
  • Sample260919-1q36eaxcmd
  • SHA256 f1fa5f92f73f0c99bf3fe9f974575acab40e72bc00e5888f3b01d1898cd0b526
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Anti Kick Stable.exe
    "C:\Users\Admin\AppData\Local\Temp\Anti Kick Stable.exe"
    1⤵
      PID:996
    • C:\Windows\system32\werfault.exe
      werfault.exe /h /shared Global\1ab6c4235b2d4968ac3ae90a85054743 /t 4312 /p 996
      1⤵
        PID:5684
      • C:\Windows\system32\werfault.exe
        werfault.exe /h /shared Global\8ee22be5cba5454ab47a9b1ef90f374a /t 4312 /p 996
        1⤵
          PID:3748
        • C:\Users\Admin\AppData\Local\Temp\Anti Kick Stable.exe
          "C:\Users\Admin\AppData\Local\Temp\Anti Kick Stable.exe"
          1⤵
            PID:5572
          • C:\Windows\system32\werfault.exe
            werfault.exe /h /shared Global\8bce9ad445ec443888c3bba1bff79b90 /t 5916 /p 5572
            1⤵
              PID:460

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  00A33E670AB3D9B070D1ED3CB15BD615
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\00A33E670AB3D9B070D1ED3CB15BD615
                  • Size 310B
                  • SHA256 0313ac9ddb8b2469e0cdc2a46606cf8b0638e7cbc4ea5a2eedc49345d2160101
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  103621DE9CD5414CC2538780B4B75751
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
                  • Size 808B
                  • SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  49A7F8B8A2FD8A9E65352CD7C88B1D10
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49A7F8B8A2FD8A9E65352CD7C88B1D10
                  • Size 177KB
                  • SHA256 4604898266cbef585403f76b22d832e3bc7dbcc3c97f33c6ade4c7af742424a1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  B46811C17859FFB409CF0E904A4AA8F8
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                  • Size 528B
                  • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  F15827BEC5BABE89C21DCDAE77464BF1
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F15827BEC5BABE89C21DCDAE77464BF1
                  • Size 701B
                  • SHA256 108dd34232a3088b45534933d0486409616a2bbad94fd8f7ab5991c01ff179b6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  00A33E670AB3D9B070D1ED3CB15BD615
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\00A33E670AB3D9B070D1ED3CB15BD615
                  • Size 192B
                  • SHA256 9bb6b34ca91b085f9913aed97e80862e56c94d07ff32fd9f4cd2f8623217f927
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  103621DE9CD5414CC2538780B4B75751
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
                  • Size 192B
                  • SHA256 19a5127285c655ca90d52c094a904704aaea7033f02ac5e7fe2dda84cef8d2c1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  49A7F8B8A2FD8A9E65352CD7C88B1D10
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49A7F8B8A2FD8A9E65352CD7C88B1D10
                  • Size 248B
                  • SHA256 e5a3f8dadd1759dd1745a2ee6655b372caedd78bbe1e3a01e370f3f189f15bff
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  B46811C17859FFB409CF0E904A4AA8F8
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                  • Size 170B
                  • SHA256 3536eb91e48eabc5627bf724cf4519466f63f1e51618d225e6c72d3c08185a4f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  F15827BEC5BABE89C21DCDAE77464BF1
                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F15827BEC5BABE89C21DCDAE77464BF1
                  • Size 192B
                  • SHA256 cd5ed1a5716696dcd00b76a832290049a191855f215c89495d5863d4452b6d01
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  antikick_logs.txt
                  • Path C:\Users\Admin\AppData\Roaming\Anti Kick Stable\antikick_logs.txt
                  • Size 242B
                  • SHA256 a4fea905a2d9e09d6f354abaf294e4f27eb8800f59bb6d3ec82a839a7a356e1d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  memory/996-0-0x00007FF669E50000-0x00007FF66A3A2000-memory.dmp
                  Download

                  memory/996-24-0x00007FF669E50000-0x00007FF66A3A2000-memory.dmp
                  Download

                  memory/996-15-0x00007FF669E50000-0x00007FF66A3A2000-memory.dmp
                  Download

                  memory/996-11-0x00007FF669E50000-0x00007FF66A3A2000-memory.dmp
                  Download

                  memory/5572-26-0x00007FF669E50000-0x00007FF66A3A2000-memory.dmp
                  Download

                  memory/5572-36-0x00007FF669E50000-0x00007FF66A3A2000-memory.dmp
                  Download

                  memory/5572-43-0x00007FF669E50000-0x00007FF66A3A2000-memory.dmp
                  Download