Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 08:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe
- Size 5.9MB
- Sample260930-j4ydmsaf25
- SHA256 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed
- MD5 dff7bdeee7cd81e6ed2b03e665c07440
- SHA1 acdb02a01698bff820122ddc97f8b063a9409697
- SHA512 e37e5b7483d8675b1781169c869d27ae38dd55d4114961c12b1525cf2efb636686abdb1f484ee67998cf2e44fbd42bc929652cf660d85521602f423cf6b97298
- SSDEEP 49152:VNyQ0yjWJtXX9AiajE0VfFKcbtz2jN9toAPnWzDpjkRy2HoOK3K1K670z+lRD5Eh:VN9HyDKnWG+oYaMEc
- TLSH T10256F653E8E798ECCC9D91318962D2126A627C484B20EFF75B60B628EF367D06D753D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe - Suspicious use of SendNotifyMessage 4 IoCs
pid Process 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe 4136 c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe"C:\Users\Admin\AppData\Local\Temp\c8c0c7a084f9a7b183a2bad552a19f0d90d11d30cd6e4add59e2db46b697baed.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4136
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\systray_temp_icon_4f7b2c068f63b090b06a23085fa11b19
- Size 363KB
- SHA256 64626140dff7bc7631aab824a16d50107af320a94214d7134817e80fd8a1dff7
- MD5 4f7b2c068f63b090b06a23085fa11b19
- SHA1 e552bca60a627c38e6c6b68ddb2b6bfbea591412
- SHA512 1d1bdf7bb960144bfc0fed03b7e42eeded86fce94a6bea70cd10c9000df31978f29e50d7263ecfc427543b9a9076706c3f58b72b434cb74ad30400c39928d6c4
- SSDEEP 384:XPLZqkLngkwhb04SdET3WHRGsmZfLQw8jBUPQUPoVwX:XPVNgi4SdE6ksmONCPQUwVw
- TLSH T17784D722C5D7D59EEC1AA6FA8596F07A05736C031350FEB76338B20CC77666A531EAC0
- MD5 SHA1 SHA512 SSDEEP TLSH