Analysis
- user interaction
yes - max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/10/2026, 21:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
skeet.exe
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
General
- Target skeet.exe
- Size 6.9MB
- Sample261002-z981bstdkb
- SHA256 78d27f83b8a929018a91fc971a78e06a2ce932fbe1e74eeb1a16d71c47b21ff1
- MD5 a85c0fb6b1accb42f3bceba66b505d61
- SHA1 3c1df1562d1872da0eb763134850ebebf74efa58
- SHA512 8a4e30f292a10724a8758b41eebb2ef0a4e151c7de7205e74b3aa8a5207b2a427ea4263f3589c4086b81c9a0286b20ef8eea6c1ab80e0d6d7f8f53e1d56d5c04
- SSDEEP 98304:KTuNIbj8TzTa8b7q7iI2loKJBjqcX9uBXDw4/V83j/:KTuN2B8/qqlvJh16DLGz/
- TLSH T1AC76BF03F79650EDD42BC47886979327E631744A0B319ADB13C46B396EA37E01F3A792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings skeet.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe 3256 skeet.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3256 skeet.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3392 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\skeet.exe"C:\Users\Admin\AppData\Local\Temp\skeet.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:3256
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:3392
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Desktop\skeet_loader.log
- Size 341B
- SHA256 2364f740738c866c0c89eeb7b5fc1db9c7a90d29aefe8cc55fdf3c11b6dde36e
- MD5 035702dbcb14f4799600bcfd18614f36
- SHA1 8b4bc0cd69f9bb3ef30413c91770556e1911bc38
- SHA512 ec521fffc3c486f37b91bd65a0fb6c4e5c92e607be7db3c9b799c27ac7f70134fa51a63c05ea8e3cf82e8b3b61efcf16b69dea16150bc43da3783552c06cea63
- TLSH T128E0D8A4397FA1E20A914340876C0E229C7293E20CA3E9F43332C31908E8906EDC9C45
- MD5 SHA1 SHA512 TLSH