Analysis
- user interaction
yes - max time kernel
149s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/09/2026, 19:01
Behavioral task
behavioral1
Sample
krx.zip
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
krx.zip
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target krx.zip
- Size 125.8MB
- Sample260920-xpc12sys9q
- SHA256 eaead92d22b4d979391c33fb4ef9d815853ce2b5dfabc55549e2823ea4136e49
- MD5 d55f58724fb8e501285fd030a3e82ece
- SHA1 99f63794e9664ad860f6f0d6249888e613594400
- SHA512 400ac4fa25658462f8b9e6cc614b6ec0e5b1f415b16adc722a2cf39d2ba7a27572d0ae4486080ac2f6c3b5252cddbca425796eb644f5fa0f8bb3ac9ce0ee0342
- SSDEEP 3145728:SJsF1McsQN024zAak9ham8vI6AlbDrTuephYjN5JB/V:jFW1Qm2ZD8vIFtphYhl/V
- TLSH T1E55833F4CB82A815CE364A30D23DF165EFD16A6AB4134A387F008B566F6F1D19E3D681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\krx.zip1⤵PID:1612
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {c82192ee-6cb5-4bc0-9ef0-fb818773790a} -Embedding1⤵PID:3984
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4892