Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 21:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_47145dbd45e65112588e75f32ba99501_.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_47145dbd45e65112588e75f32ba99501_.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe
- Size 1.8MB
- Sample260930-z9asjayfrc
- SHA256 2d007c795ea6fc958b5bb76ed9379704022d472639d2d866f973ce7211831f1b
- MD5 47145dbd45e65112588e75f32ba99501
- SHA1 e8b9ed1004686325e3fe63978fea196d5adcc7da
- SHA512 638a2ff703c1299e32129cbd75b937e066710a80efec3147989f628979f3278e84060a058f80626dda909ba08e77dc22012a269296e6b344d246585e4d26f892
- SSDEEP 24576:hxS50wzYKRTZF4OYmeSxNkR3Gq8JsU3Aot+Ec0xMknqqIpfcZYF:nS50wzYiZF4OXxOGZqqIpfcZYF
- TLSH T1A195E983BAC74EE6CAC667B496D343356338FD518B1E5F2F6608C2316D536C5AE4AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe 5312 2026-09-29_47145dbd45e65112588e75f32ba99501_.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4576 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_47145dbd45e65112588e75f32ba99501_.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_47145dbd45e65112588e75f32ba99501_.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:5312
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4576