Analysis
- user interaction
yes - max time kernel
1049s - max time network
471s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/10/2026, 02:21
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Prestige.zip
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Prestige.zip
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target Prestige.zip
- Size 5.0MB
- Sample261024-cs71da1zhy
- SHA256 0337741a692a9d42db6f76d3ef1da68618cdbf0d8e6b70fc2944a1607361d5e7
- MD5 895fd65ea518129a29666df4f1b02946
- SHA1 630c11606abe2fa56ac27172da4fb7a6239d2388
- SHA512 f74df414b769b99a83800afa4d10edd47679b8ec0bbd51575da21721ccf21bb0039e38cbe1e0806587c29b67c5c48bd570b507ba5ad7542fad1fec387aad6199
- SSDEEP 98304:X1g7O48dj0lkvGe3uLJEznptBcVHnYwzqzY3OmHGjHOeWwoJ:XSa48p2MGe+LKznpHLwzoUOmmrOeWwY
- TLSH T1333633CAF096F5DD4D987BAFA8C1683388D4215BEB1EB7ECAE43D17908815D53C96C02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Prestige.zip1⤵PID:1864
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4496