Analysis
- max time kernel
150s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 03:30
Behavioral task
behavioral1
Sample
fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe
- Size 798KB
- Sample261030-d2wjdaat4p
- SHA256 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18
- MD5 a7de4429e178f8925b04c64347197210
- SHA1 e8254f6e1346f7d32378ef85cd9d6ac2f4d1564d
- SHA512 0aa37f130eb03bc3cf747e8fc447c77c9c7c8f6d0d64378fb9cf541a3a5eb7870310648740b6c437f4cdb4832805af611031541593fb8b09037e880601cc5635
- SSDEEP 12288:yOiMfUkVvSo4RfXRKyzWyDdM7700jlHu+ZgXB9aKT9vPgVUgaINW/RUvjOiXg:4F+vCRpKyzFy7wZVx9vxYVUgvA5U+
- TLSH T1E405230EAFEC5430EBCCD2358E7F0B9869232981B95EDB37854F581DCA75351B72A052
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4148-0-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-1-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-2-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-3-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-4-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-5-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-6-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-7-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-8-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-9-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-10-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-11-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-12-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-13-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-14-0x0000000140000000-0x0000000140376000-memory.dmp upx behavioral2/memory/4148-15-0x0000000140000000-0x0000000140376000-memory.dmp upx - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe 4148 fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe"C:\Users\Admin\AppData\Local\Temp\fd3e7cfd3745d20b62178d5e4284a440747b78d43d667421a2f54b305fbbcf18.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4148