Analysis
- user interaction
yes - max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 00:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
- Size 6.6MB
- Sample261030-a48d6sch68
- SHA256 f740f37618d797670074dccd09e676b6e6ef81987ca8db4ae7fd16f411882c2a
- MD5 e9e409ba6eb7cdd00642f1318109c459
- SHA1 6a5d4446ee23ddc32cc68534dc03390ae8c83768
- SHA512 2ca384a94b22ffa8ec93d197f0f54e20b3f08f4d00d124d6323877ad4ea0826c84e53c6b8dbc6fd471a562ac37da57cf45b39ef0b8c6fcd1002ec62830c389c6
- SSDEEP 98304:h7woMEtOpdYVGDwL01hpy+iIoIAMRFEJnMwiiTZ:h7woMEtO4VGDQ00+Lo4RKJnMSZ
- TLSH T1A3663ADF7AF01895D123CA78995C87C6FE2A3448076C56BB49C098D639DAEE81F38137
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 3 IoCs
description ioc Process File opened for modification C:\Program Files\AimCore\logs\acai.launcher.log acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe File created C:\Program Files\AimCore\logs\acai.crash_ACR_01dd6808370fe0a9_7wO5-qVQF8e5V0k7.json.tmp.3748.240701843.0 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe File opened for modification C:\Program Files\AimCore\logs\acai.launcher-crash.log acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 3748 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe"C:\Users\Admin\AppData\Local\Temp\acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe"1⤵
- Drops file in Program Files directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:3748
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\AimCore\logs\acai.launcher.log
- Size 2KB
- SHA256 890798a12e4e76a16160c61566b59ddcaa4566f57963e6769b57cde126133dbc
- MD5 53b9859871daa2577dab0ab394e1ccfc
- SHA1 de04d2391d4c229fcfd62738893be70392c3bb2d
- SHA512 33c8e41a69b2c08c83414781a64e795924c6bbf2ad8a5c256c031c76f356b2fa0a081a07e62d7ba48e87a080aaf10588a6d02d707e378fe30ea9c2b082b63081
- TLSH T1CC513318076C82A71E4003A0622D0EF7731DB26776444DB89E9EDBD8318E81DFE1F5D6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\AimCore\logs\acai.launcher.log
- Size 1KB
- SHA256 bab5351a0be231b7a79b5c4a259217c2bd68acde68f44e7363c2b4ed34e68cdb
- MD5 36cfc85474f70c191f06955c7e82d822
- SHA1 9fe1a53f78fad8a69d3ab36926116efcb8a0e6e5
- SHA512 d8226185e6722281d910b653f2e4b27d250961da378733c22304dcb4d7490707432cbeb7d9b1d8d102b1bf1adfa529837411429f61804a7ac384ba2d5dac74e4
- TLSH T17D21DC016A6DC3A91E400351533C1CF7B76CF52726840EA85FAAEBE426CE819FE5F158
- MD5 SHA1 SHA512 TLSH