df9b0867902de51de926454726f8568f30fab4f6bfc45d2d77ad6138438c3154

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/10/2026, 22:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Unishade-Setup-0.6.1.exe
Size 2.5MB
Sample261004-2ynlcssx7n
SHA256 df9b0867902de51de926454726f8568f30fab4f6bfc45d2d77ad6138438c3154
MD5 7a86f11caad0d295859ebb57849f4dd7
SHA1 e88ae6328b6b13d49195c0a521f04c6576f9ad4d
SHA512 005dd87589f237ec307a90ca81a45b442de2dd3db1aae9038a52d5940e8f895393213a1435412a088ca58836178514c544e3074c6910d0b232d11a625141bb24
SSDEEP 49152:fzCv5KS26P5HQgJKHEn3VXKGGAn8BR9Za6ZKvuDKjc:uhKih6qXZrS
TLSH
T1BFC5AE1AA2A402FCE0B7D1B9CE969907EB72784A07709ADF07D056551F636E09F7E303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Unishade-Setup-0.6.1.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Unishade-Setup-0.6.1.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5100	Unishade-Setup-0.6.1.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5100	Unishade-Setup-0.6.1.exe

C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-0.6.1.exe
"C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-0.6.1.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads