Analysis
- user interaction
yes - max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/10/2026, 19:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BYPASS EXE V3.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
General
- Target BYPASS EXE V3.exe
- Size 84.0MB
- Sample261001-ypeejsstds
- SHA256 5b433458c46c450b1ed695f18c645c626eb5ea86cd7de31beec2e399ddd060c5
- MD5 9e9cef8a6c1c8e61853a17082845af0a
- SHA1 c78fe6ecead470b63a9e878d90d3fa0a91401462
- SHA512 d99c1863c46682a7178970715cebc2304e460459b410f6a1e40836a9face63f622b479d9a3ee9dd9846ceb85e367da858f1c176e0659b6af189a30036f95e3b3
- SSDEEP 1572864:fU+XBgAt/CKvWbbQL6k59CmuQTQ5SJNZWJyCEyc1iTgtVoHmluY:fU+XBbLeYL6kOm1ZziC+Tgoj
- TLSH T17518339AA5E557ACD04BC534D2861EF9E9CA74CB0EB9550FBFC704023A31C84CEE5A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\BYPASS EXE V3.exe"C:\Users\Admin\AppData\Local\Temp\BYPASS EXE V3.exe"1⤵PID:4324
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {24AC8F2B-4D4A-4C17-9607-6A4B14068F97} -Embedding1⤵PID:1108
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5092
-
C:\Users\Admin\AppData\Local\Temp\BYPASS EXE V3.exe"C:\Users\Admin\AppData\Local\Temp\BYPASS EXE V3.exe"1⤵PID:5068