Analysis

  • max time kernel
    150s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 16:30

General

  • Target
    2c46b0e271264fe9c545ad7aa09d739b88d9f9b516c00d7841ac5453f0aaf76a.exe
  • Size 11.5MB
  • Sample261027-tz5bhas13j
  • SHA256 2c46b0e271264fe9c545ad7aa09d739b88d9f9b516c00d7841ac5453f0aaf76a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2c46b0e271264fe9c545ad7aa09d739b88d9f9b516c00d7841ac5453f0aaf76a.exe
    "C:\Users\Admin\AppData\Local\Temp\2c46b0e271264fe9c545ad7aa09d739b88d9f9b516c00d7841ac5453f0aaf76a.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:3600
    • C:\Windows\system32\tar.exe
      "C:\Windows\system32\tar.exe" -xf "C:\Users\Admin\AppData\Local\Temp\owlx_payload_3600.zip" -C "C:\Users\Admin\AppData\Local\OwlX"
      2⤵
        PID:4804
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1608

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            golden.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\filled\golden.svg
            • Size 547B
            • SHA256 01d38de1542ec7da35401a9c94786c5dcc6802929907b3e019fb6a59f320743a
            • MD5 SHA1 SHA512 TLSH

            alipay-circle.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\alipay-circle.svg
            • Size 1KB
            • SHA256 a9d0950086a1096ce119ecc274d72f983d77c9d9ada1efae4e77f842d289b0f9
            • MD5 SHA1 SHA512 TLSH

            backward.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\backward.svg
            • Size 313B
            • SHA256 4f1a015dd63264f0f1fe278e8c885539a3da4bb67316adc504c6a729e6c6a417
            • MD5 SHA1 SHA512 TLSH

            behance-square.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\behance-square.svg
            • Size 1KB
            • SHA256 4e2deb5abddad58ed20822e57817c51e42544e044da6c695e245a5b9872fcdd2
            • MD5 SHA1 SHA512 TLSH

            caret-down.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\caret-down.svg
            • Size 180B
            • SHA256 aa9c38bcd53704a2d52d60614da430fb61e8b0ab19c5b04a2c8dfc3f723e8290
            • MD5 SHA1 SHA512 TLSH

            caret-left.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\caret-left.svg
            • Size 180B
            • SHA256 2dfd9957cb61598b3abbd7e6c8636395860cb11dca3cbad22a12c9ae070b63e4
            • MD5 SHA1 SHA512 TLSH

            caret-right.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\caret-right.svg
            • Size 182B
            • SHA256 df487c3584f56201463303f1d1704b4d58feeeb7341cf984c1fe8cd6b19566d2
            • MD5 SHA1 SHA512 TLSH

            caret-up.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\caret-up.svg
            • Size 181B
            • SHA256 ce911cfdac509e8ab64912143aa57ca55bdf1f51df5400ffe6214323c6dfded6
            • MD5 SHA1 SHA512 TLSH

            ci.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\ci.svg
            • Size 674B
            • SHA256 676bf59cc4bf43757ebb6643f3ec54feb98727b04410b75c2626c15a43a53ae5
            • MD5 SHA1 SHA512 TLSH

            codepen-circle.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\codepen-circle.svg
            • Size 1KB
            • SHA256 35d5eaf4c2ab5035f9c2bcfd64f0e701c47dae3dff713be071641bbbf23ba3f4
            • MD5 SHA1 SHA512 TLSH

            copyright.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\copyright.svg
            • Size 580B
            • SHA256 da22177744395a17f6bc1f0da356dd67c1cde51022c66097cd4951528a4635fa
            • MD5 SHA1 SHA512 TLSH

            dingtalk.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\dingtalk.svg
            • Size 602B
            • SHA256 f2614aa1a85938849a0f0b03621ae452546ec18b97544c61f238bdce5f62fdaf
            • MD5 SHA1 SHA512 TLSH

            dollar.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\dollar.svg
            • Size 890B
            • SHA256 3fa2c5d777a498a4e79fbab916010ddb2d44bf98795c3ecc3f8672fec9e502dc
            • MD5 SHA1 SHA512 TLSH

            dribbble-square.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\dribbble-square.svg
            • Size 1KB
            • SHA256 6c1ed8df2301ca348178173d6de96da7ca02827a0c30de3cde233f8992bcb3e0
            • MD5 SHA1 SHA512 TLSH

            euro.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\euro.svg
            • Size 810B
            • SHA256 620bcc8b68c1d689fc17cf028570bf5209714ed4f6eea34828466738bc96f264
            • MD5 SHA1 SHA512 TLSH

            expand-alt.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\expand-alt.svg
            • Size 471B
            • SHA256 27de2aaa63efe14c90f74b7bdc9d43625647742eea91c6df3c42859218c53ad1
            • MD5 SHA1 SHA512 TLSH

            fast-backward.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\fast-backward.svg
            • Size 405B
            • SHA256 2047b7fc353c8634871d5c4811bf4d1e0232dd1150b5f4d79e52667b7cb7e136
            • MD5 SHA1 SHA512 TLSH

            fast-forward.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\fast-forward.svg
            • Size 433B
            • SHA256 22aa74286027eb5a6bfaa6506b9665fa6dff1b8cb31fc1eb13bff2eb9c51eb07
            • MD5 SHA1 SHA512 TLSH

            forward.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\forward.svg
            • Size 310B
            • SHA256 0c142986f2a6de4665b97a4eab7348d58422e2bd980e07baf6212c6a02cd8c45
            • MD5 SHA1 SHA512 TLSH

            github.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\github.svg
            • Size 716B
            • SHA256 bce3dc84247fcf8b381f030dee45a89e590f33ed1a11493239a7855be3bc88f0
            • MD5 SHA1 SHA512 TLSH

            pound.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\pound.svg
            • Size 757B
            • SHA256 e09ae8316ad7bdf8ae1075862f43813d044d3448dacea54d3847c44a45fde443
            • MD5 SHA1 SHA512 TLSH

            slack-square.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\slack-square.svg
            • Size 1KB
            • SHA256 bb1e0a120dc0144d0baa88715532261edad1ccc6d5fec700dc939ccf99bb47a4
            • MD5 SHA1 SHA512 TLSH

            step-backward.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\step-backward.svg
            • Size 270B
            • SHA256 51a65bdc3b65cf815ec0fc5c8800f5bdd516ec03449877176253183c3d9545ed
            • MD5 SHA1 SHA512 TLSH

            step-forward.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\step-forward.svg
            • Size 271B
            • SHA256 774185fc275222401ee7b44db33535168fc0d8eab48da3ea9a5dea92579399a6
            • MD5 SHA1 SHA512 TLSH

            taobao-circle.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\taobao-circle.svg
            • Size 1KB
            • SHA256 67733695cb4cda523fd41fd5c64313e5220d9d335b079713e8f02f10a71093d2
            • MD5 SHA1 SHA512 TLSH

            trademark.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\trademark.svg
            • Size 530B
            • SHA256 de60e9d5e40d3d6732890f6b37579963fc24e64cb91e60794215e93ba6914cba
            • MD5 SHA1 SHA512 TLSH

            wechat.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\wechat.svg
            • Size 1KB
            • SHA256 ab6658a0cd69425cbf11ba3336524f2b3332129752f8487ec604ed6b32ed5d1a
            • MD5 SHA1 SHA512 TLSH

            weibo-circle.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\weibo-circle.svg
            • Size 1KB
            • SHA256 d30957809bfa8568eeae3f474de62a33b21093f644576fc93f530975bea7f7e9
            • MD5 SHA1 SHA512 TLSH

            weibo-square.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\outline\weibo-square.svg
            • Size 1KB
            • SHA256 08df5815e10096e3a1e5151d8d89abc6b924c4a1a3f5b54a96dade747e47c97f
            • MD5 SHA1 SHA512 TLSH

            ci.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\twotone\ci.svg
            • Size 1KB
            • SHA256 63884dbb3b1cd6b91b116dd7686c35ccf42739cf0ae80fda179481a783c5be03
            • MD5 SHA1 SHA512 TLSH

            copyright.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\twotone\copyright.svg
            • Size 1KB
            • SHA256 2a5f27d37f5c215ea071260f70acbef4c545ddaaa6fafa7c3ce44832315b78a2
            • MD5 SHA1 SHA512 TLSH

            dollar.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\twotone\dollar.svg
            • Size 1KB
            • SHA256 c66a6e857d4ce2dd541811d05d5f45bb0ecf0ff5e4b9c8f3720af66f75874618
            • MD5 SHA1 SHA512 TLSH

            euro.svg

            • Path C:\Users\Admin\AppData\Local\OwlX\site\assets\twotone\euro.svg
            • Size 1KB
            • SHA256 119a96adbaa4279147a8f3502fa96d2f9659eefaffb609c57152dbfa0df3c6c6
            • MD5 SHA1 SHA512 TLSH

            cover.png

            • Path C:\Users\Admin\AppData\Local\OwlX\site\owlx-cache\img\cover.png
            • Size 375KB
            • SHA256 c4833344cfdd4f19efd28acb48ad7681330dfaa8636a4e5abfa0696e7b93243c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            owlx_payload_3600.zip

            • Path C:\Users\Admin\AppData\Local\Temp\owlx_payload_3600.zip
            • Size 10.7MB
            • SHA256 9b9e6b8ed72af726a53622a7f5c4f3cd71e1d3ac646a31892cbb11cc6b30885a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/3600-1197-0x00007FF6F0550000-0x00007FF6F106F000-memory.dmp

            memory/3600-1903-0x00007FF6F0550000-0x00007FF6F106F000-memory.dmp