e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 12:37

Target
e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898.exe
Size 400KB
Sample260930-ptz3dafe65
SHA256 e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898
MD5 596763b69d0d1df4a509bd5ef34c6c60
SHA1 ee73527c24b35909884aabc6051c30b9abbd49ce
SHA512 ac562ac0d5a50286fdfe147508be181da3adbf02919134ba8d789013eeb708df1009730d76e05227d59e06e7f533064035bf8f5d8b5c0b4a38b9dbb541418cab
SSDEEP 3072:B5wh0NYQfe5KPXj01yQbtClSvqOB9A0uPY+jC2gai8O4VEA6hHFssICmps7Inr:B5wSNYQgOXqyBlGsNn
TLSH
T120944055AFED8556F0F3AF396DB547516A36BC61BE30D68E0B00256E8C30B90DA70B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4128	e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898.exe

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898.exe
"C:\Users\Admin\AppData\Local\Temp\e60a8ec31ae39ef4671d0431bf8285aff9354badaa7e18b29f0d895373e1b898.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4128

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact