Analysis
- user interaction
yes - max time kernel
20s - max time network
18s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/10/2026, 15:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ClassicShell.exe
Resource
win10ltsc2021-20260911-en
1 signatures
150 seconds
General
- Target ClassicShell.exe
- Size 6.8MB
- Sample261024-ta3rdavxfv
- SHA256 a848bf24651421fbcd15c7e44f80bb87cbacd2599eb86508829537693359e032
- MD5 c67dff7c65792e6ea24aa748f34b9232
- SHA1 438b6fa7d5a2c7ca49837f403bcbb73c14d46a3e
- SHA512 5e1b0b024f36288c1d2dd4bc5cf4e6b7d469e1e7e29dcef748d17a92b9396c94440eb27348cd2561d17593d8c705d4d9b51ae7b49b50c6dee85f73dec7100879
- SSDEEP 196608:ck0ZD3wcntby4M7fVy7CXihieDuz+yOQJkC1iZiUvfOR:ckyDgURy4M7fVyutXxUe
- TLSH T1DB76224468F0CE64D0349E72E46A35F7491A2E2EFD445D2BB167FFEC76BA0D08107A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 ClassicShell.exe