caae9bab010d01176fdddaee82ff9272bcc04adceee3eb16c3ff62bea7ab29f3

Analysis

max time kernel
149s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 16:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dstokenclean.exe
Size 40KB
Sample261026-t5mnmsfs41
SHA256 caae9bab010d01176fdddaee82ff9272bcc04adceee3eb16c3ff62bea7ab29f3
MD5 3a26ab8676ff8f9388535ad9277c09f5
SHA1 28aa3d75d57ca4f330f43c800f69ff70015fd7ff
SHA512 ca4e6d887e41bc5971e30bfd50e7d78e9fa9a96c16897fa65a5b4e7865fe90662d4c8badc5851a6dcfd27f2f3c1c801511ec3f5c570879bcf1360536afb24da7
SSDEEP 192:PFcGksY+1Mo4Lo5H4lcwh9ioVtU7Wd/flVtALW3EW6:fTY+1f4uH4Kafq7WHVmW3EW
TLSH
T1B303D749A7AA0CD6F5B5AB7D85B246096135B9340B73C7DF0E60415A0E33EC09F39BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 11 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00002.jrs	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.chk	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jcp	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.jfm	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.jtx	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSStmp.log	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSSres00001.jrs	svchost.exe

C:\Users\Admin\AppData\Local\Temp\dstokenclean.exe
"C:\Users\Admin\AppData\Local\Temp\dstokenclean.exe"
1⤵
PID:2120

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
1⤵
- Drops file in System32 directory
PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

DSS.log

Path C:\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log
Size 64KB
SHA256 b316be5a35c9acf313d43e0c95be1a1a27f50e76a8dad4e80826aaf1b1af553b
MD5 66e6ec1d5ec656478e81077579e95208
SHA1 cf66245b017635ca731706dc791b616b6bc82382
SHA512 7075a50dddac06da237129203410c1b7eb8fb12ab1d5bb9b9ce4d9e52598ef3992dc01320fab247bd54c61b002f205fb851f6e0c53b06318441dc9ac3b801520
SSDEEP 6:nXK6ID/j6YhYDhP5c23qC59hYDhP5c23qC5FotUilO+B:XK60b6Y6Ph6CX6Ph6CwVlOW
TLSH
T160539703921B04B2CD369C3D8A86AF001736F006B1C84F01818890AEDEC22013FB2CF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2252-0-0x000002F624380000-0x000002F624390000-memory.dmp

Download

memory/2252-4-0x000002F6243C0000-0x000002F6243D0000-memory.dmp

Download

memory/2252-12-0x000002F634F10000-0x000002F634F11000-memory.dmp

Download

memory/2252-14-0x000002F634F90000-0x000002F634F91000-memory.dmp

Download

memory/2252-16-0x000002F634F90000-0x000002F634F91000-memory.dmp

Download

memory/2252-18-0x000002F635020000-0x000002F635021000-memory.dmp

Download

memory/2252-17-0x000002F635020000-0x000002F635021000-memory.dmp

Download

memory/2252-19-0x000002F635030000-0x000002F635031000-memory.dmp

Download

memory/2252-22-0x000002F635030000-0x000002F635031000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads