Analysis
- user interaction
yes - max time kernel
32s - platform
windows11-21h2_x64 - resource
win11-20260911-fr - resource tags
arch:x64arch:x86image:win11-20260911-frlocale:fr-fros:windows11-21h2-x64systemwindows - submitted
02/10/2026, 22:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win11-20260911-fr
2 signatures
150 seconds
General
- Target Loader.exe
- Size 14.4MB
- Sample261002-2mn3raxvbz
- SHA256 de47921e7fbd6879cbbcac37fbc32fc6396f33fc3ea10a5e39ce355cc69b51b2
- MD5 0f06fe650650aece46d1492a079fcb50
- SHA1 b0c1b643e3492d1497ce0cd2ba0b7d564ee9d07a
- SHA512 4a47b8fd9f25c228bb97592e31800f5e305c643c6ff330cb0bd43ef96eb8dc89edf8481b1f74e5eadc5a90b037926b11988399c0f337d3ca086c10402dfa09a2
- SSDEEP 196608:ej3x9n+s1ZzPPtfzYYSMgcSPhAVg7PAmkgCjPuSEibxYZqL107wF:SvnlzP1LrgdPAmkgCjNjbxTL1Q
- TLSH T1B1E6CF07F351829CC6569938CAA2D793F3717C401B2593DB729C3A1A9F672F00EBA6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3840 Loader.exe 3840 Loader.exe 3840 Loader.exe 3840 Loader.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3840 Loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Loader.exe"C:\Users\Admin\AppData\Local\Temp\Loader.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3840
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3612
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\veil.wtf\logs\security.log
- Size 817B
- SHA256 5ff621d4d5f83927719d28a9919eaa82b2b7a41b3cf02bd916349b333e470407
- MD5 c5f6e825b18c26781e1cd10d07ecb2e4
- SHA1 a94c556a6e90f64af5ffbacf0eb7a0d2f112f5f8
- SHA512 3c887873d7b4fee5a56cdf0ba099d28487369af7db01470bb3456af8acc9bb4b3b46b6ed909b0c3b59ee34d1914da2a13b93b3b3b1b34691ac688a29cfd2f1c3
- TLSH T165019002A26C70B6614E84F2405A8DA9D6F178749F080DCC2111CADDBB4FFE9531E566
- MD5 SHA1 SHA512 TLSH