Overview
overview
5Static
static
52.exe
windows10-2004-x64
32.exe
windows11-ltsc_2024-x64
3MicrosoftE..._1.exe
windows10-2004-x64
3MicrosoftE..._1.exe
windows11-ltsc_2024-x64
3MicrosoftE..._2.exe
windows10-2004-x64
3MicrosoftE..._2.exe
windows11-ltsc_2024-x64
3x64_A_nolit.exe
windows10-2004-x64
3x64_A_nolit.exe
windows11-ltsc_2024-x64
3x64_D_go122.exe
windows10-2004-x64
3x64_D_go122.exe
windows11-ltsc_2024-x64
3x64_E_go12...ny.exe
windows10-2004-x64
3x64_E_go12...ny.exe
windows11-ltsc_2024-x64
3x64_F_firefox_tls.exe
windows10-2004-x64
3x64_F_firefox_tls.exe
windows11-ltsc_2024-x64
3x64_G_noutls.exe
windows10-2004-x64
3x64_G_noutls.exe
windows11-ltsc_2024-x64
3x64_upx_test.exe
windows10-2004-x64
5x64_upx_test.exe
windows11-ltsc_2024-x64
5Analysis
- max time kernel
150s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 17:15
Behavioral task
behavioral1
Sample
2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
MicrosoftEdgeUpdate_x64_1.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
MicrosoftEdgeUpdate_x64_1.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
MicrosoftEdgeUpdate_x64_2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
MicrosoftEdgeUpdate_x64_2.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
x64_A_nolit.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
x64_A_nolit.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
x64_D_go122.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
x64_D_go122.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
x64_E_go122_notiny.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
x64_E_go122_notiny.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
x64_F_firefox_tls.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
x64_F_firefox_tls.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
x64_G_noutls.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
x64_G_noutls.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
x64_upx_test.exe
Resource
win10v2004-20260911-en
General
- Target 2.exe
- Size 11.8MB
- Sample261003-vs3d1atbja
- SHA256 571357510e1b8d02adabd53acca25bc1178b58ae8a75a70a1fe0fe17a6bbaf79
- MD5 806a764017ebc93f496bd00181a662fa
- SHA1 b03f04c8bd514468c6d549ada8801973e0642f2c
- SHA512 8f00e9485d6acd45f08acb804ee1d0eec2b0c3a185c1a37f00353076f00c430dc71ceec7f5297358418abf39ba4c1efaa54218f1aba5fd5f2c78e2b9640e121c
- SSDEEP 98304:VzHUYpI9zPvSNTqQrF0vO7bNzKE1b3RNZO:VozONTqWF0sNzXm
- TLSH T139C63943E8E60C94C4FDC2B595398226A971785D0B7A23EF57A1B7302F337E15A79B80
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname 2.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1772 2.exe