Analysis
- geolocation tags
asiadelhiinindia - user interaction
yes - max time kernel
80s - max time network
68s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 01:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
skeet 21_10_26/skeet.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target skeet 21_10_26/skeet.exe
- Size 16.0MB
- Sample261024-b5apzag16j
- SHA256 4d368f1b46db80c4b68ca98c1f23f1f68e17a883f095e17f782d07936e9af0fd
- MD5 43da8b0203a89f5a748e8d13010edec4
- SHA1 4d6417b440db58e4b5d3cd0483d927e38cf97de3
- SHA512 319a2d02d9f264dc9703215b7c90ba24618f3742d318646b726757ad5a0b997552ba5c6c58887287565fc8181b02b876823f19465a73476494ef23490aaf533f
- SSDEEP 196608:iYuWi85vxB4lyF6exQxVLu9IHpXJhcz/xbdSJVSy:C850lXexZ9IHBcz/ZoJQy
- TLSH T146F6E002F6D251BDC066C434C387977BE561344A0B316AEF27C41A252FB2BE09F76B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\Local Settings skeet.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe 5932 skeet.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5932 skeet.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2448 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\skeet 21_10_26\skeet.exe"C:\Users\Admin\AppData\Local\Temp\skeet 21_10_26\skeet.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:5932
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:2448
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Desktop\skeet_loader.log
- Size 460B
- SHA256 6f4ac234d3122abc564d31116ac7e455782803c9438748541855b05497ff02a7
- MD5 bf3455012fe66b4f2c0b677d078a151c
- SHA1 1fb946e9211852028b3beb51b4a5df87161f8bec
- SHA512 c10a58c6ecae92e400b6d737d97ecce424dc9f147025afced86b68d0d15c84aeff1d1a8e9dedce99b421e54afcab0ca2b7b2be4edacdce0fa3789dfef6d1e01d
- TLSH T104F0A7E86139E0C54DA183C5531D0AA42776B9231436E2B877F7CF38AE6F3245E8D68D
- MD5 SHA1 SHA512 TLSH