Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/10/2026, 04:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Aitiy.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Aitiy.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
AitiyOcr.dll
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
AitiyOcr.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target Aitiy.exe
- Size 7.0MB
- Sample261017-e7ey9asw5p
- SHA256 cbfe32f9fb7f862fc54462c64404d02badfa17117264dd5564d84960b9a6730c
- MD5 05212186fb5a803f496e98c860cd3fee
- SHA1 8ce20fa25a748b35eaaab34cdb0e3c894797b8fd
- SHA512 6dd4a99bb40d4fc415edabde45a26982b7081402cf7c84afdc4b203d558eedc1b134bfb63ba7851951d4e74db0fbb5e770d5d7651d75342d745a8fc01004c055
- SSDEEP 49152:HOxXRsEUxNYZArHu1VR3B2XzjWX9G7O4yzZE2XlNW1azCRx9MvBUgNCmENFF/XEi:4sqxM+pj+eDeRqScQx9c2
- TLSH T1E676AF5AB16801ECC0ABC1F4CE6B9917E77278CA0330A2DF13E196571F676B09E7E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 5880 Aitiy.exe Token: SeIncBasePriorityPrivilege 5880 Aitiy.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5880 Aitiy.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 5880 Aitiy.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5880 Aitiy.exe 5880 Aitiy.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\.aitiy\config.json.tmp.2
- Size 30KB
- SHA256 f0350789bfd318b447b7a311e342fd6dbf9a7fa0a767028bfbbefd67d5990a7c
- MD5 6995bbdbd874edd96e0e4abb96bde71d
- SHA1 ab55a8263fa0c98e4d84ef050fca7a5d1448e809
- SHA512 796888bcb089354a5c41cbfdecab51e7bc2f8957b8b9c6285bffeeda5e9b08d49badede1c0919d30961d326d391518b02c6de84ca667f68ffe06caf306ef4ead
- SSDEEP 384:++988Ag2yZkvAqZ3cF3MDzdv9sdEc3DvHvZcTtVVaAuIJ4VcaMi2MJ11K05yi1pt:2XpkkmZL9
- TLSH T138D2465DCDB55CF7049EA276427B52433831809F0DA8BC293B8C049C5F5DA6F2A76ABC
- MD5 SHA1 SHA512 SSDEEP TLSH