Analysis
- user interaction
yes - max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/10/2026, 19:08
Static task
static1
Behavioral task
behavioral1
Sample
$R3BLHUT.inf
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target $R3BLHUT.inf
- Size 1KB
- Sample261011-xtmfaafd84
- SHA256 2426d5b6965ef923dbf7a0c0f49c5322d5f59861e2853c9414facf27c647288d
- MD5 660f76387464ce36e685780f31dc8a95
- SHA1 1d8973fadf809d3eeea3957827ae905441b522b5
- SHA512 44a86f0e54fd7f749839fa78cc05f03e8697e031246981a1eecdb084ace10a0a0e84821afc02fb386f574df396e481e431da2dc32aad92ea0dbbcdf36668ad2e
- TLSH T132418D45E9136E37704FFE296AB00BC8322762638D6D54EDB04C88953BFE5864BA7523
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\$R3BLHUT.inf1⤵PID:6012
-
C:\Windows\System32\DataExchangeHost.exeC:\Windows\System32\DataExchangeHost.exe -Embedding1⤵PID:4696
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:5000
-
C:\Windows\system32\werfault.exewerfault.exe /hc /shared Global\4f09143c6f1b4454b21fca98dba32680 /t 5604 /p 23561⤵PID:4088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Desktop\This PC - Shortcut (2).lnk
- Size 420B
- SHA256 c19f078217bd19850b5a879410e4594b95cded439337a780ce2a8226c0c4e435
- MD5 463d79f94a8d34f372562b9deb00ca3b
- SHA1 30cf6e6a371bf5527132a78d1030a0dfd28fca4d
- SHA512 d44042a28d44d44a26a4d4f84bb71c014bdef3f656d14f15cb4ca231173026b01bd7ebd926b88a8e06a070c313d61e4b6413114ef20ccf082785772a819a828c
- TLSH T135E07D0404E92513C01DC0324FF1F10307606CD23D88EE14A8441B4D8CB09056697672
- MD5 SHA1 SHA512 TLSH