Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    141s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/10/2026, 19:08

General

  • Target
    $R3BLHUT.inf
  • Size 1KB
  • Sample261011-xtmfaafd84
  • SHA256 2426d5b6965ef923dbf7a0c0f49c5322d5f59861e2853c9414facf27c647288d
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\$R3BLHUT.inf
    1⤵
      PID:6012
    • C:\Windows\System32\DataExchangeHost.exe
      C:\Windows\System32\DataExchangeHost.exe -Embedding
      1⤵
        PID:4696
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
        1⤵
          PID:5000
        • C:\Windows\system32\werfault.exe
          werfault.exe /hc /shared Global\4f09143c6f1b4454b21fca98dba32680 /t 5604 /p 2356
          1⤵
            PID:4088

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                This PC - Shortcut (2).lnk

                • Path C:\Users\Admin\Desktop\This PC - Shortcut (2).lnk
                • Size 420B
                • SHA256 c19f078217bd19850b5a879410e4594b95cded439337a780ce2a8226c0c4e435
                • MD5 SHA1 SHA512 TLSH