Analysis
- max time kernel
30s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 13:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Stark Movment2.exe
Resource
win10v2004-20260911-en
3 signatures
30 seconds
Behavioral task
behavioral2
Sample
Stark Movment2.exe
Resource
win11ltsc2024-20260911-en
3 signatures
30 seconds
General
- Target Stark Movment2.exe
- Size 1.2MB
- Sample261023-qab2wach76
- SHA256 26772984274637a304521a024d72cbda8a4b599ee7c8b6f7f7c31e2e23d1eb47
- MD5 b6f983ffc20ede436240e7b4a044f1c3
- SHA1 5f55dd4616ba179fdbd9a1a77547cebdf4eb6d76
- SHA512 d441217e604d9a86f0d0e886c6f771434b3763b7969eaee884a9881899056655f52d51de7ffe2bb31eb08a877fff71ecd68a14ad900bcd1a36b7ed21b62d9419
- SSDEEP 24576:zUNxvqF6FGYJf6yjNQpNONZNlTX5PlGPgquLEIWxUc7N11QaSYx7GqL:zUNxvC6FGYJf6yjNQpNONZnTX5PlGPgc
- TLSH T1EE458D0733A2C0E8EF6790F2C6295223E772741517389BDB64E05A2DDF93EA15B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe 1604 Stark Movment2.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1604 Stark Movment2.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\movementpro.ini
- Size 192B
- SHA256 3cf47a7833855044343533b38a97da97270fb667e833074b926750ee8d3d31c5
- MD5 b26fdd5f908fc6183cefbb1a8144216d
- SHA1 c4ab663769397cc09bfa21744e2bff8d3b40591e
- SHA512 f9b5323665c4acf2ace0ca4989f4591bb0cf75ade053718f80ad6d308694ee44734b3b7ce78bbf8bcad8d401b1516a6f181dacdea0f8d7366efc82b1a6b540be
- TLSH T18EC08C0303FC0004F0B20A18EAB941720B367D482C0CC02CA2E0921E48E0E00A8F7BFB
- MD5 SHA1 SHA512 TLSH