Analysis
- user interaction
yes - max time kernel
76s - max time network
70s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 23:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
leakybasenonagon.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
leakybasenonagon.exe
Resource
win11ltsc2024-20260911-en
22 signatures
150 seconds
General
- Target leakybasenonagon.exe
- Size 1.1MB
- Sample261014-3cy1mstybs
- SHA256 507ec6aa1da15061a76c84c5d3fad3995906362b25ab2e14b9c1048f29c2c693
- MD5 ae5481809d8c0343a9f7fb9064930563
- SHA1 f6c8bf21534ba251ec57c6d88e999bb05f268f53
- SHA512 dd1f4c4398d8230c2ec590f4f6b43d8515e76b525e49a5f90c7acdeb5a6f92d2c725937f22315e53baa57ecde271b39f8cac18722b987a5d4ea1d796ac5329e5
- SSDEEP 12288:Jbs/m0E54jwaFXGc8lEBBBHGBKq2IZwDlvfqItNqdg:JbOVE5ifGPRZwpvf3fd
- TLSH T1DB357B83E7A385D8C116C9B5534BF137F9627C8E4B157197ABC41E633A67BA4E22CB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 leakybasenonagon.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString leakybasenonagon.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\leakybasenonagon.exe"C:\Users\Admin\AppData\Local\Temp\leakybasenonagon.exe"1⤵
- Checks processor information in registry
PID:4808
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\New Text Document.txt1⤵PID:1720