c630bfdaa7c68391c88aa92ec35c62280fe2d2181ea11743bb2c902c05a1cddf

Analysis

max time kernel
152s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/09/2026, 19:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MortalShell2-Win64-Shipping.exe
Size 187.4MB
Sample260926-ym7nbasvby
SHA256 c630bfdaa7c68391c88aa92ec35c62280fe2d2181ea11743bb2c902c05a1cddf
MD5 8bc1043d1821b00a171782b36def8a5c
SHA1 bb6589707d3613d93b9cae42ca532c853edea53a
SHA512 431369a7c30cf1d544c138249d8d4250acd0f22aa2332922de8debd10b67b331c0cd1c818d6d82a319320dda431705951460e1be7747a685a33ea4003325de8d
SSDEEP 1572864:oLn36oP/j+OgC0P9KXisw7JhkVFyF22H0UQx7AYvgkumRj:o3ls1vlsBx
TLSH
T104987B27B2E908D8F07EC1758A3A9506E7B17875132087DF05A14C991F7FFE0697AB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
1352	MortalShell2-Win64-Shipping.exe

C:\Users\Admin\AppData\Local\Temp\MortalShell2-Win64-Shipping.exe
"C:\Users\Admin\AppData\Local\Temp\MortalShell2-Win64-Shipping.exe"
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads