Resubmissions
30/09/2026, 03:59
260930-ej8aws1sex430/09/2026, 03:56
260930-ehlqhaeb48430/09/2026, 03:47
260930-ecg55azyhv430/09/2026, 03:47
260930-eb9trazyex1Analysis
- user interaction
yes - max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 03:59
Static task
static1
Behavioral task
behavioral1
Sample
30092026_0347_29092026_Journal Voucher (JV).vhd.zip
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
30092026_0347_29092026_Journal Voucher (JV).vhd.zip
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 30092026_0347_29092026_Journal Voucher (JV).vhd.zip
- Size 152KB
- Sample260930-ej8aws1sex
- SHA256 aca58d3a740a217a73959b369ee2fca56e20ecf0d4273f5941bd528344f07b34
- MD5 b903d2d7ecb80bb6d2a6b95cab3605f1
- SHA1 63b0a5d0373f85ecb8693280f3ecfd9b46e2f32d
- SHA512 3de1dbc2d41b93ec33376817066950e62dc7ea035896e258e1d596a40e27727dc42c8a68320e8eded24d1d6ba4440dba3ee52e24ddb4c4339570a87f271f5f56
- SSDEEP 3072:OMLnjvZ0GLT4RI5yVfATpsGXj1otFaXk1d0Nd5ghK/1masJIH6:1Lt0GL4IYM6aXk1uoKNmZGa
- TLSH T11CE3125AB8D9B145C47459333E249A6283732534FBCA9054B2FE362BE5C3F6D930A0E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\logs\StorGroupPolicy.log svchost.exe - Suspicious behavior: LoadsDriver 1 IoCs
pid 4
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\30092026_0347_29092026_Journal Voucher (JV).vhd.zip"1⤵PID:2108
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:6096
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum1⤵
- Drops file in Windows directory
PID:1348