Overview
overview
5Static
static
52.exe
windows10-2004-x64
32.exe
windows11-ltsc_2024-x64
3MicrosoftE..._1.exe
windows10-2004-x64
3MicrosoftE..._1.exe
windows11-ltsc_2024-x64
3MicrosoftE..._2.exe
windows10-2004-x64
3MicrosoftE..._2.exe
windows11-ltsc_2024-x64
3x64_A_nolit.exe
windows10-2004-x64
3x64_A_nolit.exe
windows11-ltsc_2024-x64
3x64_D_go122.exe
windows10-2004-x64
3x64_D_go122.exe
windows11-ltsc_2024-x64
3x64_E_go12...ny.exe
windows10-2004-x64
3x64_E_go12...ny.exe
windows11-ltsc_2024-x64
3x64_F_firefox_tls.exe
windows10-2004-x64
3x64_F_firefox_tls.exe
windows11-ltsc_2024-x64
3x64_G_noutls.exe
windows10-2004-x64
3x64_G_noutls.exe
windows11-ltsc_2024-x64
3x64_upx_test.exe
windows10-2004-x64
5x64_upx_test.exe
windows11-ltsc_2024-x64
5Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/10/2026, 17:15
Behavioral task
behavioral1
Sample
2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
MicrosoftEdgeUpdate_x64_1.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
MicrosoftEdgeUpdate_x64_1.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
MicrosoftEdgeUpdate_x64_2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
MicrosoftEdgeUpdate_x64_2.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
x64_A_nolit.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
x64_A_nolit.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
x64_D_go122.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
x64_D_go122.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
x64_E_go122_notiny.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
x64_E_go122_notiny.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
x64_F_firefox_tls.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
x64_F_firefox_tls.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
x64_G_noutls.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
x64_G_noutls.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
x64_upx_test.exe
Resource
win10v2004-20260911-en
General
- Target MicrosoftEdgeUpdate_x64_1.exe
- Size 6.7MB
- Sample261003-vs3d1atbja
- SHA256 85a79d513797127c4351a678619b1db00a2723ab8c0c4402da5de4d85bb596d4
- MD5 769ef0f4fc2d8837221da7e350b90ffd
- SHA1 cd513563d1f4d2cb5607f00922fa90f4d35e3d91
- SHA512 db6ebbae7d02e090eac8d11cf37ec8a5a3f705704b1726cfeac01d902a67a70f96fd54981c110306b5209527408a127352a8a3200615c9986d6910c71e667aa5
- SSDEEP 49152:3wZdFgUUZGQe2YsXfZoEFeWZgDL+Z11QGkZJUuYuDrH+RjPU5EgKAtqF6dlVeUjv:3U+RY+Z0GiDrHFElgdn
- TLSH T115663947EC9505E8C0ADD6358966A253BA727C484F3163E73B60F7382F76BD06AB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname MicrosoftEdgeUpdate_x64_1.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4544 MicrosoftEdgeUpdate_x64_1.exe