2e2856e24bf61c7891c8fbdc72b6971872a6bfc3ca383249052258b1038510ec

Analysis

max time kernel
48s
max time network
28s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/09/2026, 20:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ofc.exe
Size 1.3MB
Sample260920-yy4e2a1zdy
SHA256 2e2856e24bf61c7891c8fbdc72b6971872a6bfc3ca383249052258b1038510ec
MD5 b90b2e395dca8fbe751add2bb8e35ddb
SHA1 6bc496640933069b47aae59333e84e0389913106
SHA512 5aa7faf0fad6df3f0ff4a620b82a497e712363e6d9d6f8c7a937411000321c8883cb7ecd37ecca165d46a813e018a05a590e33cf593ede2e242cf71096554cd8
SSDEEP 12288:CP29ML0wnFLLl/yLg7X/lFtR19Z0+3RHJDA8leML0wnFLLl/yLg7X/lFtR19Z0+O:8wYRRzjvA8wYRRzjvAaA0kYRRzjvA
TLSH
T1EE5508343AEA5029F373AEB95FE4B49F9A2EF7733707645D1051038A4A22A41DD8173E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\ofc.exe
"C:\Users\Admin\AppData\Local\Temp\ofc.exe"
1⤵
PID:4396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

17.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\17.png
Size 506B
SHA256 2127c1f12c3b825b77ea4a7ff1e3d43eacf90a8c7f388e70a5440eba1637d37d
MD5 62167b01399fce1e301a21b452d30c4e
SHA1 cc861618840a414ee9cc8cd8b60e3972a2704b7a
SHA512 9d79ee8d478ff3c22f280117bc1cca2d93bf5c08f4d58ca79edc412b7b26a5e253e7833063135059a58e0516fa8a1df34ef2de0bad314c81eb95713973cf9295
TLSH
T116F054B38EB85C70C23423306230C1D558B61D0C75FD24984319AD2307EE4DDF94528E
MD5 SHA1 SHA512 TLSH

Submit Download

5.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\5.png
Size 284B
SHA256 0da0af85108a34573ee26c09bf363223780741958ec8ed775cd00c3c3478bf76
MD5 a022ccd6e7b9883a844df6f1eb9cb8a4
SHA1 2756e0ddd79cea4ed654f1204793ee1dcc1bd879
SHA512 f9ba09f39bce1fc0cac8f0ff28d49309682a1a6f9a58ff37736f83e2a81100b6d9e0996eef185b2e272fd3e8a8b2ecad67120d543fab333a882d3eb233272345
TLSH
T115D02B4283041A7BD6B151757B70A1339C3158713B10DD9806CBF11F4A62B75DCF4F42
MD5 SHA1 SHA512 TLSH

Submit Download

ala_1.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\ala_1.png
Size 1KB
SHA256 1d4248ce803eadaa77d7bc3899ae90adf7b61d7d5683ceb49141a9202386a188
MD5 f144060ed7d7fcac7ed39f4036f80355
SHA1 7e1fc5f21c472682bb1c47010bcc72a413aa3447
SHA512 02d3265f999e3af7ac0a00c49ef98493e0c4fe33ed100a81e8ed75f289d06c74a53235a8e088fcfe88973617f362576b8d932f1abb251dfc56252da1d328b576
TLSH
T13721D8EE0D1EE87C8A9872033189E665975DF534B3921AF52ADE183B6131A6B044FDC2
MD5 SHA1 SHA512 TLSH

Submit Download

f.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\f.png
Size 494B
SHA256 1644797c41d8850aee0543ef6fa77da5b72c6f165590eb624b8d32b4f44c9ea0
MD5 87cf20767c39aeaab345040bb1460482
SHA1 4fc865ccb0f6a8613af1dc1c3156a665d0b1e20a
SHA512 d71339e7420eda9666326022b91dfb86d55f6d0d48bd46b3ed4be6a967c2adbb02893e3ac03649584553542a958bcf6effe18ac1bbd8b31a06549e4d1586a68f
TLSH
T160F054F7621D68A4F2032E4E50C72528E5354F64F1BD86B1A20CC9EA0710014226C126
MD5 SHA1 SHA512 TLSH

Submit Download

ffsf.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\ffsf.png
Size 1KB
SHA256 26e51270b7d7a1af242d8d51c5f41bc2db78f418adcfe2ce352747455043d869
MD5 922fe773b74a044c269fb51fe9400d07
SHA1 2575a41bc458226d9cf7f68502b3adf49ee4ee4f
SHA512 c2bd07020d0a5780b1e778630fb215da400b77ff0fbd2ca36d5b71473e2e8459477bfc336af733016d1fb1062403d4b7548344b33814fe63d15aecc7cff38f51
TLSH
T17421B4AB6A4E6205C16A703CE0505831FBF30A866C824AAE168EA65E7252069956F7CC
MD5 SHA1 SHA512 TLSH

Submit Download

fss.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\fss.png
Size 344B
SHA256 1542844c2b32c280576b1929e5a68135ea9d056ebe4f4228d35f2cb54b8b4118
MD5 a6bfa2fc7020d7af057468e906a07da3
SHA1 b7aca836a17d26c001d15e70908c2c5e0eb62276
SHA512 22af56a74b19114e25d4422e776f2a96d1d40de7ae37452ed31c0cbc0ae8521c51243d50e63456b999eb35eba5b8f0fad9d962f23ef7e9b9e064fc49a9993796
TLSH
T1E0E0C0EB2681463CD4264E6B61B3415194E7CA9DC138173A004DA4B82A0108492CC30A
MD5 SHA1 SHA512 TLSH

Submit Download

mira_do_soufake.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\mira_do_soufake.png
Size 397B
SHA256 13ac8c531c2707fca9f74f83044cdbf6870f7bdd7185e6f4b092a66a7bcbc11a
MD5 f61153e9a225a2faf7e90d7421a4ec77
SHA1 168b4553b192c8b59ae2016d06845b761626a086
SHA512 421c1cbf0d6ad263df755110556e61c19ece72722f615258b6b24e0727f6da55e0be89d5b68d6a9e30dc1f4a9a3461e3cf9eeb2dafb12ddc22b3441ef4010eac
TLSH
T1F7E0F8C4A3C72A81C1A0D279F42BB81CC8178B3C10033A0FD198D438B88F80FC0A93C2
MD5 SHA1 SHA512 TLSH

Submit Download

outra.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\outra.png
Size 2KB
SHA256 03c038e3c685a794a84003a457b2c0553503092e4722c9fc8ac5da11c0d97d6a
MD5 96a69b9b4eb60944c5adc294952c148d
SHA1 10a0c0d9df5bb961e63a9713ea041e58cf21505d
SHA512 049fb3fcb3ef47082f1c558cacab02ac62c4e345c5c69295e186642c3076356d9693876634531c3446e8fe4987cf8522bc1c44df63b9e20ae9f337e711cb30dd
TLSH
T197412BF696A68C24B577BC2E2B842F8F4B2805A5827A8C8357CC2E77DC5D09048A0445
MD5 SHA1 SHA512 TLSH

Submit Download

shotgun.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\shotgun.png
Size 1KB
SHA256 921bd05140a7c036a289d9ef505c6e3c8da9b92f9c6b82fc14fd14c2f5479d7f
MD5 45f9212a34ed8f2ae259db8101f7713c
SHA1 eba3cb6eb9bee41b7ab7ecdc7affb0aa479ffd94
SHA512 7f23f12a0d1b132de5301df77e5119050a4fe1427e278a4b79c59ec1e6f6e4ca54757dae5d6c54c85b678afbaa655b49b51abf33ad2e51892ccadc4f11334a38
TLSH
T1D02108E914A02590C997ED7355F1805F381B1B221569C2498E8DF23BEB5024DA0CDA3B
MD5 SHA1 SHA512 TLSH

Submit Download

siteM156.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\siteM156.png
Size 32KB
SHA256 310bf1d55c127386a2936c31444765a3369c989995d68cb1f5600988018788ff
MD5 c8675a01db2d586498af1f27cd129260
SHA1 78b78b84482f5c4e7bec293de4ee684a0e3ba8ed
SHA512 f2d1aede9f573c492e5e637852d86b98afabcb25bf01adf0bf3a25fc73e483d86cf3a94203ac9cc43deefa4ae93bff240326c691c81af1591742edea6abf4e9f
SSDEEP 768:nFeRdMMOOZq/anghgcDEoR97FnaaRcBdPOgs6INaS3o/q1F:nMdROOf6gcDEY97ZaaRAP4daS36y
TLSH
T1F0E2F150B55F0DA4C47A0F39B76897922CDFB411A4564BD3D603AD350C83BC5AE87A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

siteM16.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\siteM16.png
Size 1KB
SHA256 f192e5cb3f05d8aa0001a8518b9340a1255db5f841ec669f66493f1f8b4994fe
MD5 46e51d0733701d2c55a576ceb6d6be14
SHA1 3d2670f277eb6017e57e6ae50eac311bd4bb4215
SHA512 53b8f59548fc684735cecf7884ccba863664e193105c275d41fb5926ddc5c4fefaae07e636cc6d8059da378350a37605388d3b0f0ea697818e8daefb2975d0f4
TLSH
T1B931C5E0176751D888DA5DDFF8E801420DB94B1D7830182FD67AA7C0C417C1D8E60982
MD5 SHA1 SHA512 TLSH

Submit Download

siteM16_1.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\siteM16_1.png
Size 41KB
SHA256 6e403317cefb4f25655bff5586fc83cd45c6fb317a57f91ae010101247f3a22d
MD5 34164abbd57e01fd49988c172cbed608
SHA1 5bcb1cb663b1a82fab82e389a97fa012c742e977
SHA512 94cc24d7e62ff6796e4acda36b17b41a789dd256d0285508d450ea842a70fed41e601df311d5ab4c104aa712410829a8e6c306d14c17d74372010d11030abc11
SSDEEP 768:iZlxr9c5zQ+I1C43lBqs6BKo1Qx6pyX3Ol0qjrZUCYXfNOvCB:6Ty5aHlBqZ1+Xq0qf+CY1yE
TLSH
T18813E0D1F9A9DA56F42AD3A59C20014D0BFDD6C358615E528D84F6FCF0E3371A0B9AB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssss.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\ssss.png
Size 1KB
SHA256 539e77b2ac070b350a2a7659ac0431aee4b4033d70f032e7001be4e67f29549f
MD5 edd36fc482e4fea35ab26b1a0d26246c
SHA1 a5a2600dcec18e155b9eb929aeac3d309019c0b3
SHA512 69d94fff57579713d046a72002e8041dcf611ed9dd7bf2b77f56c7ca9aebfa28322b6556ccc51d52d5823e142e71e495876eb97f62864fa126ec383deaace690
TLSH
T145314D975503D55CF777506B99CE41A60D1200B14253BE0052CE67CEA71BC4828D355F
MD5 SHA1 SHA512 TLSH

Submit Download

unknowkn.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\unknowkn.png
Size 1KB
SHA256 2a56177a1b100ea91acdb1112b01b4cf960d6d216fc1612de3856681579ae03e
MD5 7a14e18271447bd8d58957c8c7301ef3
SHA1 347b70822e9c43cbfd646bf0719ac3570e37f3e0
SHA512 72f566159d97cc2bbcf66a92a17d5f940ad5469051562b1bfeddee3adfa55800ecd73f24309e59bca21ab779a777b359c01647779b02f2c6971ca6d505274e06
TLSH
T182118634E90AF9E5E7F5049660D8C0D4B575F2203600E61A89D2D0B1042A8F693E7AA9
MD5 SHA1 SHA512 TLSH

Submit Download

unknown.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\unknown.png
Size 1KB
SHA256 ccc201ca234384fcec8bf43a8e182b8e8f8746d8e89b6f31fc175a5069cf30ed
MD5 caeb542567d93c0d44284e7cd9ff5f8a
SHA1 05dc72f22a8bbf9c3c0b765f64b135510d0efd9e
SHA512 f427d82984eda96666d4572f028486fb33472618549f62dc4a9162acb09a56da658a840a053b2032379b2fcff6a494279abc1c34aea2aa648c08d44709838994
TLSH
T1E031E7B6A134D942CA544A7127CB1A3C843843A12757136436B9E43E112F4F067ABFDD
MD5 SHA1 SHA512 TLSH

Submit Download

unknown_1.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\unknown_1.png
Size 647B
SHA256 06dbcf85bf5792892e5972c54a7f222158a1d65ee3af60b91423972a218c960b
MD5 d884dc54414a62c2315beb7147a8a74a
SHA1 3efea02775738f7de7cb9b519d41b81e1746f93b
SHA512 e145d0182cae09e6fb1deda3d2e70681f3cb03c9383c415b7831970fe24438e89b19ce241a5fe8d98038752f9a7a0e3867601f09a6093eeec6240f3c1a433f99
TLSH
T1CDF023FA910D497CCB65457442891637FA54E56862372512E311AA6018EA371860AF52
MD5 SHA1 SHA512 TLSH

Submit Download

unknown_9.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\unknown_9.png
Size 1KB
SHA256 ccf2f48b39250ea980169d09d3a9c6f44d629bf78fe6259d08f1eea67d39c8dd
MD5 95a58268294a7a30600b395dfd0e3a41
SHA1 61de3b13dbc0fa0610ecf2aecd8cf098856c5db4
SHA512 6eedb61d5b6ffb046e569e8607e9c85590c03f2a925bfecc7cb88eebf90308b7188da867290d6c63e7c13ec16114c4683daeb44a51d7ec0230dd58c34ed4c99b
TLSH
T1EF31E8F35270DCA7FEDED5739D5B10141B37E064800AEFB8974588512CDA5259C245FA
MD5 SHA1 SHA512 TLSH

Submit Download

uno_tieste.png

Path C:\Users\Admin\AppData\Local\RoyalCrosshairLibrary\uno_tieste.png
Size 53KB
SHA256 8cb8b4398146a39b08e2d118726085cde335ef894f63f61ac7de2fc35db28093
MD5 9294b2bc02ea5641f69d0be541f92062
SHA1 2ae3fcd14e3a8e4cc8285b9e43121786d6a0dea2
SHA512 f87fd01b938a09c313155e0d5aac38b2f716da482bca463c6014e1bc86b6c2ff7bcd364349b485e1a2f26d42c5f4fba40d0ac2f3356a32ac4a07893ce921d2fc
SSDEEP 1536:PDADII0uKGdjd+ipVusK7j7xanL8OMsclW140tZu:PDA66jdPK7jdanpMscloZu
TLSH
T18533CFFBC8B41903E0B823B1A1A2038056F7BEDD673D78996AC9BD8147BC0CCB5E4446
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4396-98-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-0-0x00007FFDC307F000-0x00007FFDC3080000-memory.dmp

Download

memory/4396-97-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-79-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-58-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-2-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-29-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-1-0x0000000000660000-0x00000000007AA000-memory.dmp

Download

memory/4396-99-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-100-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-101-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-102-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-103-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

memory/4396-104-0x00007FFDC2EF0000-0x00007FFDC3894000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads