160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6

Login
Reports

Overview

overview

Static

static

00270d016c...bd.dll

windows10-2004-x64

00270d016c...bd.dll

windows11-ltsc_2024-x64

0225a30270...24.exe

windows10-2004-x64

0225a30270...24.exe

windows11-ltsc_2024-x64

125f75320c...3c.exe

windows10-2004-x64

125f75320c...3c.exe

windows11-ltsc_2024-x64

133e003cc5...22.elf

ubuntu-18.04-amd64

134de049f7...93.msi

windows10-2004-x64

134de049f7...93.msi

windows11-ltsc_2024-x64

148c2d55d3...57.exe

windows10-2004-x64

148c2d55d3...57.exe

windows11-ltsc_2024-x64

151e21dde7...80.msi

windows10-2004-x64

151e21dde7...80.msi

windows11-ltsc_2024-x64

158ca8d131...c7.exe

windows10-2004-x64

158ca8d131...c7.exe

windows11-ltsc_2024-x64

160dd5158f...f6.exe

windows10-2004-x64

160dd5158f...f6.exe

windows11-ltsc_2024-x64

166f41385b...f3.exe

windows10-2004-x64

166f41385b...f3.exe

windows11-ltsc_2024-x64

188b2408a0...99.exe

windows10-2004-x64

188b2408a0...99.exe

windows11-ltsc_2024-x64

195cdde8bc...d3.exe

windows10-2004-x64

195cdde8bc...d3.exe

windows11-ltsc_2024-x64

213d6a4c5a...59.exe

windows10-2004-x64

213d6a4c5a...59.exe

windows11-ltsc_2024-x64

227aff885f...0c.exe

windows10-2004-x64

227aff885f...0c.exe

windows11-ltsc_2024-x64

231bba5652...e9.exe

windows10-2004-x64

231bba5652...e9.exe

windows11-ltsc_2024-x64

244ed096d2...6d.elf

ubuntu-18.04-amd64

259f9ec106...c4.exe

windows10-2004-x64

259f9ec106...c4.exe

windows11-ltsc_2024-x64

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 17:29

Sharing

Copy URL Twitter E-mail

Static task

static1

39 signatures

Behavioral task

behavioral1

Sample

00270d016c00f9a58a8fad47aa52b95f2383e5b00a76e7281112156e828472bd.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion magniber privilege_escalation ransomware

Behavioral task

behavioral2

Sample

00270d016c00f9a58a8fad47aa52b95f2383e5b00a76e7281112156e828472bd.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

magniber ransomware

Behavioral task

behavioral3

Sample

0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral4

Sample

0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral5

Sample

125f75320c80d5b4d73c000058f26e92207d28a3d7d88551041f7a62f2a59e3c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

backdoor discovery gandcrab ransomware

Behavioral task

behavioral6

Sample

125f75320c80d5b4d73c000058f26e92207d28a3d7d88551041f7a62f2a59e3c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622.elf

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

134de049f7ef48728b0a126b5f440494817d577c3fbdb92792afa15ae08f1393.msi

Resource

win10v2004-20260911-en

windows10-2004-x64

27 signatures

150 seconds

defense_evasion discovery execution magniber impact persistence privilege_escalation ransomware

Behavioral task

behavioral9

Sample

134de049f7ef48728b0a126b5f440494817d577c3fbdb92792afa15ae08f1393.msi

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

20 signatures

150 seconds

defense_evasion discovery execution persistence privilege_escalation ransomware

Behavioral task

behavioral10

Sample

148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

24 signatures

150 seconds

defense_evasion discovery evasion execution chaos impact persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral11

Sample

148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

defense_evasion evasion execution chaos impact persistence privilege_escalation ransomware

Behavioral task

behavioral12

Sample

151e21dde7bb3ce31c04e25638e7513f83e19cbd0a7549a574d97339c9486f80.msi

Resource

win10v2004-20260911-en

windows10-2004-x64

27 signatures

150 seconds

defense_evasion discovery execution magniber impact persistence privilege_escalation ransomware

Behavioral task

behavioral13

Sample

151e21dde7bb3ce31c04e25638e7513f83e19cbd0a7549a574d97339c9486f80.msi

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

19 signatures

150 seconds

defense_evasion discovery execution persistence privilege_escalation ransomware

Behavioral task

behavioral14

Sample

158ca8d131402f77b2efadfbfe70e1ee44764ce4551ed15f43de064d98eb16c7.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

discovery persistence ransomware spyware stealer

Behavioral task

behavioral15

Sample

158ca8d131402f77b2efadfbfe70e1ee44764ce4551ed15f43de064d98eb16c7.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery persistence spyware stealer

Behavioral task

behavioral16

Sample

160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

credential_access discovery azov persistence privilege_escalation ransomware spyware stealer wiper

Behavioral task

behavioral17

Sample

160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

166f41385bf95bc7de1dedecd9d2288c7d185dfce0fa1848595c53a5339c95f3.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

14 signatures

150 seconds

discovery nitro persistence ransomware spyware stealer

Behavioral task

behavioral19

Sample

166f41385bf95bc7de1dedecd9d2288c7d185dfce0fa1848595c53a5339c95f3.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery persistence spyware stealer

Behavioral task

behavioral20

Sample

188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

18 signatures

150 seconds

defense_evasion discovery execution legionlocker ransomware themida trojan

Behavioral task

behavioral21

Sample

188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

defense_evasion discovery execution legionlocker ransomware themida trojan

Behavioral task

behavioral22

Sample

195cdde8bc2a98f3583f9647171a5b47d9f577f4ffd5805bb3367b012f3428d3.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

195cdde8bc2a98f3583f9647171a5b47d9f577f4ffd5805bb3367b012f3428d3.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

credential_access discovery chupacabra ransomware spyware stealer

Behavioral task

behavioral25

Sample

213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

discovery chupacabra ransomware spyware stealer

Behavioral task

behavioral26

Sample

227aff885f792fe1bcc142a13b7148482ad8c576fd75e0d92abedb0c7cdc520c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

discovery execution nominatuscrypto persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral27

Sample

227aff885f792fe1bcc142a13b7148482ad8c576fd75e0d92abedb0c7cdc520c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

discovery execution nominatuscrypto persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral28

Sample

231bba5652f6fbdbab3016362fb7925fc4e4489fff5e6a4a98c37fba5bd0cfe9.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

27 signatures

150 seconds

credential_access defense_evasion discovery evasion execution phobos impact persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral29

Sample

231bba5652f6fbdbab3016362fb7925fc4e4489fff5e6a4a98c37fba5bd0cfe9.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

27 signatures

150 seconds

credential_access defense_evasion discovery evasion execution phobos impact persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral30

Sample

244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

259f9ec10642442667a40bf78f03af2fc6d653443cce7062636eb750331657c4.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

259f9ec10642442667a40bf78f03af2fc6d653443cce7062636eb750331657c4.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6.exe
Size 265KB
Sample261011-v21a1ax18l
SHA256 160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6
MD5 e966f2760b0d0f5ae5860a5790be4a35
SHA1 16d0cbf30be1b864615b6d523402b2a59d3f3d44
SHA512 0de342e22915803fa0a8c8dfa93755d9e92a699d00ead83d316cdbcc846f777d1fbb16df6cea0ee048d003f8b800b19a153e2d40d8ed94a45bb28ca4113f4e65
SSDEEP 6144:WNXQxVs9xAQ+Vuy4elu8GiXzMlTB5xAuFQfadQHHkC+:WVQxVs9xEu6LzUTfx9QfCekH
TLSH
T1EA44AF1AB3A00DF5DC67827ACD838B55EA727C054730D34B165A93A75F33361AA3E34A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6.exe
"C:\Users\Admin\AppData\Local\Temp\160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6.exe"
1⤵
PID:6064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/6064-0-0x0000000001F90000-0x0000000001F94000-memory.dmp

Download

memory/6064-3-0x0000000000960000-0x0000000000965000-memory.dmp

Download

memory/6064-2-0x0000000000940000-0x0000000000947000-memory.dmp

Download