04db39659104b1a6b6a96f7ae7d65d977d34b14cbfa4372de843e757590b901f

Login
Reports

Overview

overview

Static

static

Documents 5.zip

windows10-2004-x64

Documents 5.zip

windows11-ltsc_2024-x64

DOS - Wind...gs.zip

windows10-2004-x64

DOS - Wind...gs.zip

windows11-ltsc_2024-x64

Dos - Wind...ll.zip

windows10-2004-x64

Dos - Wind...ll.zip

windows11-ltsc_2024-x64

WindowsPow...ts.ps1

windows10-2004-x64

WindowsPow...ts.ps1

windows11-ltsc_2024-x64

WindowsPow...ts.ps1

windows10-2004-x64

WindowsPow...ts.ps1

windows11-ltsc_2024-x64

WindowsPow...ps1xml

windows10-2004-x64

WindowsPow...ps1xml

windows11-ltsc_2024-x64

WindowsPow...on.ps1

windows10-2004-x64

WindowsPow...on.ps1

windows11-ltsc_2024-x64

WindowsPow...l..ps1

windows10-2004-x64

WindowsPow...l..ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...ag.ps1

windows10-2004-x64

WindowsPow...ag.ps1

windows11-ltsc_2024-x64

WindowsPow...nt.ps1

windows10-2004-x64

WindowsPow...nt.ps1

windows11-ltsc_2024-x64

WindowsPow...at.xml

windows10-2004-x64

WindowsPow...at.xml

windows11-ltsc_2024-x64

WindowsPow...t.psd1

windows10-2004-x64

WindowsPow...t.psd1

windows11-ltsc_2024-x64

WindowsPow...ICENSE

windows10-2004-x64

WindowsPow...ICENSE

windows11-ltsc_2024-x64

Analysis

max time kernel
599s
max time network
484s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

Documents 5.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

Documents 5.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

DOS - Windows Logs Admin Events and Pics of things.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

DOS - Windows Logs Admin Events and Pics of things.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

600 seconds

adware persistence ransomware spyware

Behavioral task

behavioral5

Sample

Dos - WindowsPowerShell.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

Dos - WindowsPowerShell.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Comprehensive/Comprehensive.Tests.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral8

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Comprehensive/Comprehensive.Tests.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral9

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Simple/Simple.Tests.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral10

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Diagnostics/Simple/Simple.Tests.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral11

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Opera.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

600 seconds

execution ransomware

Behavioral task

behavioral12

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Opera.ps1xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

17 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral13

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Operation.Validation.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral14

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Microsoft.PowerShell.Operation.Validation.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral15

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Microsoft.PowerShell..ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral16

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Microsoft.PowerShell..ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral17

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example1.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral18

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example1.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral19

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example2.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral20

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example2.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral21

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral22

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral23

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral24

Sample

WindowsPowerShell/Modules/Microsoft.PowerShell.Operation.Validation/1.0.1/Test/Modules/Example3.Diag.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

600 seconds

execution

Behavioral task

behavioral25

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/DSCResources/MSFT_PackageManagement/MSFT_PackageManagement.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral26

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/DSCResources/MSFT_PackageManagement/MSFT_PackageManagement.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

600 seconds

execution

Behavioral task

behavioral27

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.format.xml

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral28

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.format.xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

600 seconds

adware persistence ransomware spyware

Behavioral task

behavioral29

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.psd1

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

600 seconds

ransomware

Behavioral task

behavioral30

Sample

WindowsPowerShell/Modules/PackageManagement/1.0.0.1/PackageManagement.psd1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

600 seconds

ransomware

Behavioral task

behavioral31

Sample

WindowsPowerShell/Modules/Pester/3.4.0/LICENSE

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

600 seconds

execution

Behavioral task

behavioral32

Sample

WindowsPowerShell/Modules/Pester/3.4.0/LICENSE

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

600 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
Documents 5.zip
Size 240.9MB
Sample260930-alaeesserb
SHA256 04db39659104b1a6b6a96f7ae7d65d977d34b14cbfa4372de843e757590b901f
MD5 4d3d48b4fd5b87fdb7fd65440bc1bd04
SHA1 aeb79ebe4b28f1c974de7cb5d2861964edea7a7a
SHA512 b91e90f90a212666d0a0d59e3b03972677f4e4718a2906dc475cd64fa59a31082f3aa629adb6877dc489e0f31c06bedfbc88dd1e1314baf8431c5149a6d27ecf
SSDEEP 6291456:O7upBsS2tncOvokLQzJMc7tArmGvXZYi61SUWiWIl5Wyo:OKpBsDt1QEQz+EG6Gvqieji
TLSH
T150C8339E192C1F83E86E9E52C224623B27F5B1E64F69FC26FB110A7704177948C76C36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Documents 5.zip"
1⤵
PID:4952

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3744

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:260

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads