Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/10/2026, 04:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Aitiy.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Aitiy.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
AitiyOcr.dll
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
AitiyOcr.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target Aitiy.exe
- Size 7.0MB
- Sample261017-e7ey9asw5p
- SHA256 cbfe32f9fb7f862fc54462c64404d02badfa17117264dd5564d84960b9a6730c
- MD5 05212186fb5a803f496e98c860cd3fee
- SHA1 8ce20fa25a748b35eaaab34cdb0e3c894797b8fd
- SHA512 6dd4a99bb40d4fc415edabde45a26982b7081402cf7c84afdc4b203d558eedc1b134bfb63ba7851951d4e74db0fbb5e770d5d7651d75342d745a8fc01004c055
- SSDEEP 49152:HOxXRsEUxNYZArHu1VR3B2XzjWX9G7O4yzZE2XlNW1azCRx9MvBUgNCmENFF/XEi:4sqxM+pj+eDeRqScQx9c2
- TLSH T1E676AF5AB16801ECC0ABC1F4CE6B9917E77278CA0330A2DF13E196571F676B09E7E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1644 Aitiy.exe Token: SeIncBasePriorityPrivilege 1644 Aitiy.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1644 Aitiy.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1644 Aitiy.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1644 Aitiy.exe 1644 Aitiy.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\.aitiy\config.json
- Size 30KB
- SHA256 278e3d31d20fbc1a1a2eca3610f1a826dec097140b822cf127163a6d8c03a400
- MD5 7c31496a563ffe9a09b68b1da64d50bb
- SHA1 16ecf2576ce3c1c99be69bd302ad733b99e90124
- SHA512 8b8b3037c710180e202051a3d740238410ca3ccfdccaf744b4db3e5b885e3b28c9c6c68b65024678c5c919ab03c4c4da21db4bb06bbe3b1e2f3a02934f467d5f
- SSDEEP 384:++988Ag2yZkvAqZ3cF3MDzdv9sdEc3DvHvZcTtVVaAuIJ4VcaMi2MJ11K05yi1pG:2apkkmZL9
- TLSH T1FAD2465DCDB55CF7049EA276427B52433831809F0DA8BC293B8C049C5F5DA6F2A76ABC
- MD5 SHA1 SHA512 SSDEEP TLSH