Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/10/2026, 06:37
Behavioral task
behavioral1
Sample
0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe
- Size 9.5MB
- Sample261011-hd1kmsdc47
- SHA256 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060
- MD5 06039bab091f8a54518b312cc340146b
- SHA1 289460aa3b24bc465fb8094c9ae9e9410230eb05
- SHA512 e00700044cd06b460c1c39930a69503e164f897c3a39a98a030d5b57428a377f415a2be3c21df70c2e92f62ab68bcef432f465ba91e52190dc4f28cc13cdb947
- SSDEEP 196608:/sxhMNvkusVt4YBizZkuCHOJE2HnbaiY1NQVD3OUskTHmO6xAsUAwy0EqOdbhNm1:0xhMm32zZ9CHOW2H+iY1NEy77NOEqaN
- TLSH T12BA63382124A62F3F2007F38960AF7E0590477A36E8BBF755D6BE6D5CDBC6D2904250B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4672-6-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-8-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-9-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-10-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-11-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-12-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-13-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-14-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-15-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-17-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-18-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-19-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-20-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-21-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-22-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-23-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-24-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-25-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-26-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-27-0x0000000000320000-0x000000000173E000-memory.dmp upx behavioral2/memory/4672-28-0x0000000000320000-0x000000000173E000-memory.dmp upx - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4672 0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe"C:\Users\Admin\AppData\Local\Temp\0059eaae9707072455926caebc15f2fdceeee97fe6f55fea8c1706e291e27060.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4672