Analysis
- user interaction
yes - max time kernel
4s - max time network
5s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
19/09/2026, 19:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Spoofer&Cleaner.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Spoofer&Cleaner.exe
Resource
win11ltsc2024-20260911-en
23 signatures
150 seconds
General
- Target Spoofer&Cleaner.exe
- Size 1.1MB
- Sample260919-xt7ffsba72
- SHA256 6a32b1927874a61585c5b158e517e5fd7d9e5c67e0e15ca7ecf9e34e3b73d565
- MD5 12f5dffdaec741cacf5e14ae0fd42821
- SHA1 66bc31cb15a3d9eb576734bb50eb890a3ee45b8c
- SHA512 140e7f42f22fd843e7d2292f77b9000623769c93b189904f1b48de8d7dd54f4793821f58146d01a089c48e5305da6b8f00cb2785b9daeb6c22571d9653d8304b
- SSDEEP 12288:Mbs/m0E54jwaFXGc8lEBBBHGBKq2IZwDXwKvfqItNqdg:MbOVE5ifGPRZwTLvf3fd
- TLSH T149357C83E7A385D8C116D9B5534BF137F9627C8E4B153197ABC41E633A67BA4E22CB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Spoofer&Cleaner.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Spoofer&Cleaner.exe