Analysis
- user interaction
yes - max time kernel
152s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 04:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Reinforce.Clubb.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Reinforce.Clubb.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target Reinforce.Clubb.exe
- Size 148.1MB
- Sample261023-elca8swvay
- SHA256 6333b95ca09bc7740a6fd2e9f08c690a81a26e34f798ebf280614ac170833e9e
- MD5 72fec9b52ec2f41de511faf170780645
- SHA1 1c4b0fb2337d0968cbbed3b514ca1eaf90e8c03f
- SHA512 006cba2651189cfeac6f69593e66145a519b5b8782b3331c1d9e7817deab9ed9e72d6099fc1c5f6cf052e30927858d23e41a2e45a17d26ea28065e33e1b88360
- SSDEEP 786432:RPpOWFpjOOAcbfWbkQshHSYajxMUbks7GQ+3HDv1++80ClhW:RPpPFpjOVcLWbGNaksqQ+3HwxG
- TLSH T1FA787C1163E81A15E27B8678D77382A1DAB5BC535711C1CF0094FA4A2F73BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 4808 wrote to memory of 1556 4808 Reinforce.Clubb.exe 89 PID 1556 wrote to memory of 3288 1556 Reinforce.Clubb.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\Reinforce.Clubb.exe"C:\Users\Admin\AppData\Local\Temp\Reinforce.Clubb.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4808 -
C:\Users\Admin\AppData\Local\Temp\Reinforce.Clubb.exe"C:\Users\Admin\AppData\Local\Temp\Reinforce.Clubb.exe" --attempt 22⤵
- Suspicious use of WriteProcessMemory
PID:1556 -
C:\Users\Admin\AppData\Local\Temp\Reinforce.Clubb.exe"C:\Users\Admin\AppData\Local\Temp\Reinforce.Clubb.exe" --attempt 33⤵PID:3288
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Reinforce.Clubb-Logs\loader-20261023.log
- Size 386B
- SHA256 bcdd57e5e28e9490428dbf57245a9d19cb81c43b63f33adf9e8fc8ff4be9e5b2
- MD5 8b06c900e532bbbc261d129209499b43
- SHA1 0b3f44793f60e49f38e8b1aba170877a4e5dfb84
- SHA512 13d3d0bacdb2ad4dd39a023f05f58fda491af632bef76d95c42a31875a7cc6b320f7fb815ddeedbbb15b6aa55706098f5ab3c2d5661d0e087bbbc8eb89b06b7e
- TLSH T147E055125B8D8B029A0C781E817E2B83D0AB882F51081F1003B8C8CC5CA6D096FDC3B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Reinforce.Clubb-Logs\loader-20261023.log
- Size 1KB
- SHA256 1131a44c23f7ce608fcf025d4f4b7b653db11db4acf8ea50cb83fd5e362ed095
- MD5 ecf0bbac88c3d36c09de4125628e4911
- SHA1 5a63b2556fe5b849a86f589dc2094c37cf8c8f4f
- SHA512 fa58a76a55313570ad09ddde6358bc3cdb06639327bfc64f64e0ec73b16651beb9d5d3141178ab4ab9d434e63241b4b4a9805650feae3de4d8075983b20ebaf0
- TLSH T14E218B076FCD8B11954EA41D817E0747D0EA9C0F05160B5167FC688CAAEDD49AFED7A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Reinforce.Clubb-Logs\loader-20261023.log
- Size 239B
- SHA256 5fd1901a416ec289f1b24ed944b7668404d4338596980433499828ad3dbccf1a
- MD5 d47331f42975913fda50efa812231a8f
- SHA1 edfb505eadf00a0533fff2766f8bbd90eeccd4d3
- SHA512 d8c70cccd44d0c5540ea81a0a87cd4389a898646a4247ebd8bb2778616a271132db4aaf45176e98e6aff0ce910b058eedd9d858158a9c35edc33acab991299a0
- TLSH T1B6D02B434B898A02C74C681980292B43D05BC41F414C0F1003A498D55CE6D495B8C7A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Reinforce.Clubb-Logs\loader-20261023.log
- Size 1KB
- SHA256 a417749b366ce49a7a416ee4fefef0bf52e0ed74ead39264d03596e95a650592
- MD5 25a2b82fb394ea81e49f1a95b581262e
- SHA1 45ca884eaf7bf5944fec9a28f06ef4bad48a425b
- SHA512 df91ef0f0a087c4ab00afb536892128b14c8358a0371cff598c41703fdadcf05e4907c2f9d8d953677d316b7911b90caae2b036abc6bb39551f961e589f98af8
- TLSH T1C83167072FCC8B21554A942D857E0B4BC1E9D80B09220A91B7FC688CABEDD44AFED790
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Reinforce.Clubb-Logs\loader-20261023.log
- Size 2KB
- SHA256 420ee0dc449f7ba101256a240130c0fc4054b75dccdb7bfd2a4e0d4cbe5af1f5
- MD5 1190356a078f578e77e29bf8bf23257a
- SHA1 ce7c33b169bb36b55306ff0f7c9dbe1966a06337
- SHA512 73302fc42f81839768d54dec90cf948e423998af92e277c49d0311cebd3e186b7e90ba8de0c9755d83acef84940a3a1f6c1b53ed2ab7a8320bcdf24dcf4314dc
- TLSH T172418B072FCD8B21554A942D857E074BD0E9D80B09260B90B7FC688CABEDD44AFEDB90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\launcher-errors.log
- Size 488B
- SHA256 07e0594a616e685dbea47b5894fbf203a369b14a37e5a7cd61ade7bd5b24284b
- MD5 514b6a77779e7ddfebeef122cff8847e
- SHA1 18728426193ad9ed81c772983cffeb7858c6e2ff
- SHA512 46720a5824579b0e237b133423af8ef357333aa29551265515e79a566f8b852e1901b52b393e710ba9f95e62878f7f088605a0482890b4726876b1802c7c40f5
- TLSH T113F089C32FDD42210493C46A4C3E1A8E49F5D988482749F9BABE758DA7CC05D8626782
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\launcher-errors.log
- Size 732B
- SHA256 942ad1ae3d6097db1c73d9975e61f8eb3473a63ba9d83de650b347bd0d6f3141
- MD5 e08e14b690f349cd788bee6a05f0af94
- SHA1 c22dc528212cb8206a7d33beefb9f775fd5fb878
- SHA512 194eed7664c574f02c2e896c6458cf0efa1309b70a979141da26f854b193b918267356d5961715b2e0498c626c5fd10350987814271535e29afeb1f2be0fb359
- TLSH T1D101D8D33FDD82210483C46A4C3E1A8E49F5D8884C2749F9BABE748EA7CC05C8626782
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\logs\loader-20261023.log
- Size 911B
- SHA256 390b6e72b721dd2a4fd051478c48b0aef023c9e93952f4fbf2d2446ba0d88005
- MD5 9e944128dd7cac735acad5f8cd59d79a
- SHA1 db906b60ccb232222f81a1b4c6d19ebaf02f729e
- SHA512 d23e29e0373c3c4fb708f327971c20a257eff90b12c3d655b18c0178984d3cf3314ee32778accce810e1a2396b782b05ab8154e32d74f8b7417a1900a130501c
- TLSH T1BB113B036FCD4721554EA42D853E0B47C1EAD40E45260A9176BD74CCABEDC449FED791
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\logs\loader-20261023.log
- Size 2KB
- SHA256 6801c6abce4a10e61f51a3e2053f75ee832daec8bd981c402745b1081ed30f3f
- MD5 bba06513600503f8d75565d5dbda3f56
- SHA1 22cbe05d144382369314cec20579792d1550c1ff
- SHA512 9fbc98a34aa844e65241fb884677be17d2a1091aee61d92f6e3c9cb18597603934405b4c1909bd076026e1dbd722421fec262ee5da65a9856c359930fd63a127
- TLSH T152518D076FCD8B215546D42D857E074BC0E9984B09260B9176BC784CABEDD44EFEDB90
- MD5 SHA1 SHA512 TLSH