c21ae87cdd186ca22760ad7aa66973eaac2a4d9a4e437a3b42daaab08eb729bc

Analysis

user interaction
yes
max time kernel
149s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SHProto-Win64-Shipping.exe
Size 135.5MB
Sample261023-e4gnnszw2r
SHA256 c21ae87cdd186ca22760ad7aa66973eaac2a4d9a4e437a3b42daaab08eb729bc
MD5 eb6b60fa250e9601f68192925a0d424a
SHA1 d1c47e0f56925cfbbdfaf5b1ccd4fa9cca0a670e
SHA512 c387dc274fdb92c98ad298f29c6543a336bc3745f7c10e15c51d06d2f20cfd033b56aa1c8f938523b7f97b562707d9160ccde793e92f884dbe314bd6717ed2e6
SSDEEP 786432:0fTBCJ2CkTYRgDkWkqwp/ocy1+T0ikPpUG3xbPMGit8Sqv/ZDl1SU:SCiockD/ioDkPCG3hMGiFqvRKU
TLSH
T178686B86B3E411D8D1BAC0748E2B9506EBB138551F3497DB05F146962F33EE29E7AB30
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
1644	SHProto-Win64-Shipping.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
656	Process not Found

C:\Users\Admin\AppData\Local\Temp\SHProto-Win64-Shipping.exe
"C:\Users\Admin\AppData\Local\Temp\SHProto-Win64-Shipping.exe"
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads