Overview

overview

7

Static

static

3

ceb38b568a...30.exe

windows10-2004-x64

7

ceb38b568a...30.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/09/2026, 19:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ceb38b568ae00d8eb72757bed6df370df4d1139af02754d96f1f8aa82e690f30.exe
  • Size 259KB
  • Sample260919-ycdbqaxtc1
  • SHA256 ceb38b568ae00d8eb72757bed6df370df4d1139af02754d96f1f8aa82e690f30
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ceb38b568ae00d8eb72757bed6df370df4d1139af02754d96f1f8aa82e690f30.exe
    "C:\Users\Admin\AppData\Local\Temp\ceb38b568ae00d8eb72757bed6df370df4d1139af02754d96f1f8aa82e690f30.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4112
    • C:\Users\Admin\AppData\Local\Temp\Eupdate Helper.exe
      "C:\Users\Admin\AppData\Local\Temp\ceb38b568ae00d8eb72757bed6df370df4d1139af02754d96f1f8aa82e690f30.exe"
      2⤵
      • Executes dropped EXE
      PID:3416
  • C:\Users\Admin\AppData\Local\Temp\Eupdate Helper.exe
    "C:\Users\Admin\AppData\Local\Temp\Eupdate Helper.exe" --service
    1⤵
    • Executes dropped EXE
    • Suspicious behavior: EnumeratesProcesses
    PID:2576
  • C:\Users\Admin\AppData\Local\Temp\Eupdate Helper.exe
    "C:\Users\Admin\AppData\Local\Temp\Eupdate Helper.exe" --guard
    1⤵
    • Executes dropped EXE
    PID:4024
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:1624

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          Eupdate Helper.exe
          • Path C:\Users\Admin\AppData\Local\Temp\Eupdate Helper.exe
          • Size 259KB
          • SHA256 ceb38b568ae00d8eb72757bed6df370df4d1139af02754d96f1f8aa82e690f30
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EupdateHelper.log
          • Path C:\Users\Admin\AppData\Local\Temp\EupdateHelper.log
          • Size 2KB
          • SHA256 aed0780ed67e4cd5cea7f8eb287deb728d657bc8cb4e5a103d0ca30e47d6bdb1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          EupdateHelper.log
          • Path C:\Windows\TEMP\EupdateHelper.log
          • Size 2KB
          • SHA256 97c7e8e02a3c1b7a9210f744256b083238abc88694af0d8eea68f6ccb7cd2bb3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          EupdateHelper.log
          • Path C:\Windows\TEMP\EupdateHelper.log
          • Size 3KB
          • SHA256 b3c38453b50eeec607cd1475aaae1fae474a7b41463a85691de294a89ade3f48
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          EupdateHelper.log
          • Path C:\Windows\Temp\EupdateHelper.log
          • Size 2KB
          • SHA256 b035376af6b77ad282fae7b32b2f0fc53bd411e49a5fef58d99f6d981aa3ec4b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          EupdateHelper.log
          • Path C:\Windows\Temp\EupdateHelper.log
          • Size 4KB
          • SHA256 75d1253273ed7afb0413a66a17a8f644ac254ceba4d3c25d513e98a8b215e22d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/3416-40-0x0000000140000000-0x000000014004A000-memory.dmp
          Download