487a95b0b500ce306963b99822b5f6347c67b53bf280aaa15bcdf0590165813b

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 17:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CursorSwitcher.exe
Size 783KB
Sample261027-wfgr7swsbs
SHA256 487a95b0b500ce306963b99822b5f6347c67b53bf280aaa15bcdf0590165813b
MD5 108ded7ba88527b79e8d764348942e4b
SHA1 b3b30758b62351089158f58b03cf6dfcae269f1c
SHA512 0e8f07cda01219bf8582b89ee4fa89e8645eb5d017aecc03b4039215ea5e6b034d9e0de06d190525a0190916087892a047e314db38055bd3fa77589654d9d627
SSDEEP 3072:3uSBZ8+sIGYRyOSKdBHPeXSf4wIQiSw/Uegxq1mm:3B8+tGYRyOSKdBveXSf4wIQi5P
TLSH
T1BC052C603A98D42EC519CA76CCD5E67CAB205DEA8520074E24D5BFAF3CB23CB4A5F50D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

defense_evasion

Malware Config

Signatures

Modifies Control Panel 3 IoCs

defense_evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Control Panel\Cursors\Schemes\W11 Cursors Dark HD v2.2 by Jepri Creations = "C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\pointer.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\help.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\working.ani,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\busy.ani,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\precision.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\beam.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\handwriting.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\unavailable.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\vert.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\horz.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\dgn1.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\dgn2.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\move.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\alternate.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\link.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\person.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_dark_v2.2\\pin.cur"	CursorSwitcher.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Control Panel\Cursors\Schemes	CursorSwitcher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Control Panel\Cursors\Schemes\W11 Cursor Light HD v2.2 by Jepri Creations = "C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\pointer.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\help.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\working.ani,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\busy.ani,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\precision.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\beam.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\handwriting.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\unavailable.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\vert.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\horz.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\dgn1.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\dgn2.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\move.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\alternate.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\link.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\person.cur,C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\Cursors\\W11_light_v2.2\\pin.cur"	CursorSwitcher.exe

C:\Users\Admin\AppData\Local\Temp\CursorSwitcher.exe
"C:\Users\Admin\AppData\Local\Temp\CursorSwitcher.exe"
1⤵
- Modifies Control Panel
PID:4968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

beam.cur

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Cursors\W11_dark_v2.2\beam.cur
Size 4KB
SHA256 3e5f02c4a87fe1644c89140b62f53c560449128c38a14842dc8347c4d07044fa
MD5 77d0ea027f4963930300cc4b61a8c70f
SHA1 3371b380e3b571c9b86e3fe32bb5b0e8bf6d8f36
SHA512 253aa825ded26a82d9a734687f833bcab3cfa13383bbfcdceac5bdaf311c1b2a4c2e22300645d1b2b35b607cb4ed3e79967d8a56074d27d19b433479a3d4f621
SSDEEP 6:Gl/GqIl1rpdXhLtmc7abUv+ggqIFvvvvvvvvvvvfQitzWxj4PfbAZEEzajjRRSSP:CW1rp9pUc9v+ZmitzQjYzAZEEGjFN
TLSH
T1D1914FE215B678E4EDAD0D7190D6B107ED78CDAAF0936C4A318238267E7710824E7E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4968-0-0x00007FF81C4EF000-0x00007FF81C4F0000-memory.dmp

Download

memory/4968-1-0x0000000000D90000-0x0000000000E58000-memory.dmp

Download

memory/4968-2-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

memory/4968-40-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

memory/4968-41-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

memory/4968-42-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

memory/4968-53-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

memory/4968-54-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

memory/4968-55-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

memory/4968-56-0x00007FF81C360000-0x00007FF81CD04000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads