Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 00:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
- Size 6.6MB
- Sample261030-a48d6sch68
- SHA256 f740f37618d797670074dccd09e676b6e6ef81987ca8db4ae7fd16f411882c2a
- MD5 e9e409ba6eb7cdd00642f1318109c459
- SHA1 6a5d4446ee23ddc32cc68534dc03390ae8c83768
- SHA512 2ca384a94b22ffa8ec93d197f0f54e20b3f08f4d00d124d6323877ad4ea0826c84e53c6b8dbc6fd471a562ac37da57cf45b39ef0b8c6fcd1002ec62830c389c6
- SSDEEP 98304:h7woMEtOpdYVGDwL01hpy+iIoIAMRFEJnMwiiTZ:h7woMEtO4VGDQ00+Lo4RKJnMSZ
- TLSH T1A3663ADF7AF01895D123CA78995C87C6FE2A3448076C56BB49C098D639DAEE81F38137
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 1 IoCs
description ioc Process File opened for modification C:\Program Files\AimCore\logs\acai.launcher.log acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe - Suspicious behavior: EnumeratesProcesses 52 IoCs
pid Process 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe 2504 acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe"C:\Users\Admin\AppData\Local\Temp\acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe"1⤵
- Drops file in Program Files directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:2504
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\AimCore\logs\acai.launcher.log
- Size 1KB
- SHA256 b19f65893ac9521c1cbc71f77b726499b1be525e840cfa6eb35181dc91838722
- MD5 5d9993b5e05ed5c67fde79af1b8b22b6
- SHA1 43e842a9d26181ea6358047a158508cf546a8ae7
- SHA512 2ca12f35f8d687db56e0bc49bba259998c93e7c7de0559e7098454a8a48e5dadd655d0af25105dd70015099a39ffc5bce799309090ebd64ba275b7dcbdaacd63
- TLSH T1FF21FE02466DC3A91E414399533D0CF7B7ACB42736901EA89BABABC421CFC1AEF5B150
- MD5 SHA1 SHA512 TLSH