Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 11:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BKNnjrK3Oe.exe
Resource
win10v2004-20260911-en
31 signatures
150 seconds
Behavioral task
behavioral2
Sample
BKNnjrK3Oe.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target BKNnjrK3Oe.exe
- Size 13.5MB
- Sample261027-nnn79add37
- SHA256 761878d9a4e62168b2f75a8ccbc688d0a9bef00439518217263c3fa4d1431b44
- MD5 a08d32dee272340d5934b9f9f663f235
- SHA1 eea47c0d35547584f70399c7065d9e249c3acb82
- SHA512 404fa6245e5a15f752516c22dcc908231645a97d822d0e1cfb98c1cf3dbb7ec6ac167965a06817becaba5a6b29509b8dbaf137dbab478435dc09f01b28b5bb54
- SSDEEP 393216:oUn0bq0RJsESy/4JwEjfn3aroX+OkfX+:oUn0pZ5LETn9X+OkfX
- TLSH T113E63361F33487F5D03BB278A482962BDB327C111B2055CBB7D2095A4FB7AE44A73729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5708 BKNnjrK3Oe.exe 5708 BKNnjrK3Oe.exe 5708 BKNnjrK3Oe.exe 5708 BKNnjrK3Oe.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5708 BKNnjrK3Oe.exe - Suspicious behavior: RenamesItself 1 IoCs
pid Process 5708 BKNnjrK3Oe.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5708 BKNnjrK3Oe.exe