Analysis
- user interaction
yes - max time kernel
24s - max time network
23s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 02:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
darien.exe
Resource
win10v2004-20260911-en
2 signatures
30 seconds
Behavioral task
behavioral2
Sample
darien.exe
Resource
win11ltsc2024-20260911-en
3 signatures
30 seconds
General
- Target darien.exe
- Size 3.6MB
- Sample260930-crjldsvtdx
- SHA256 9173c4f4fb503ba2e9bfe9a9e9e4e7f3480688075daa8201782de36f0dc345d2
- MD5 e96d798f57073cca31f8f11a14ffd166
- SHA1 e3a4483de8fc082b0a7a69c7f700c9d94913b3d6
- SHA512 54c81e66c474af6f5ce2c67422e2c7ca78d9e53d9f2e5ad68e4b0872363ede08fbc4c450696b0470de91e3c13f045ab874de56858fae4f9cfc7ee070e590f3cc
- SSDEEP 49152:24lzCCoj+kCpg6Gvhe8FCNB/2IpqMvAs8pWy4y3VLuxPNyA+2dmKrTZ8TpCS0zcI:24kJ+tGvhmARjVqxDmGTZ80S0zcJ
- TLSH T1E006D041A2D38A6DCF22A73461AB233BE270BCD0477196C7465C46346F63AF48DBEB45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{73A70FD8-FB66-4E76-AFB3-D14488495276} darien.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{D31CDF95-F01D-4703-82F9-2BB7BD529F65} darien.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 560 darien.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 560 darien.exe