Analysis
- max time kernel
898s - max time network
475s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
01/10/2026, 11:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
pe-sieve64.exe
Resource
win10ltsc2021-20260911-en
2 signatures
900 seconds
General
- Target pe-sieve64.exe
- Size 1.2MB
- Sample261001-nb5dpsyfjg
- SHA256 9f3ff2884a2c61006cd0a92b7572a815b8dc17012be7747a6abd6ca07c503a3b
- MD5 3af7965ae0f9a0700c17d964ae67d720
- SHA1 3d0ff70ac2947369737743d968063e7816991109
- SHA512 0ff722b5bb61909dd77e4e3f2e2d302d3b96059767b6f234254065941738152b5c9025d51b694b457534cd18bc51ba8504514bce0b6cfbab38a282d7ec59ae6e
- SSDEEP 24576:ua7d0ctDSVmqZzHBLmgCCMU1WXqWMmChYzKsQQGr89:ua7dntDSV9eyWX5MmfQbw9
- TLSH T148454B1976784BB1F06E817F89E185C2F2B27CD50B3176CB0651331A2F33AF159BA299
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 3660 cmd.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 1788 wrote to memory of 3660 1788 pe-sieve64.exe 83