Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 03:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8397f26f4d5b823c.msi
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8397f26f4d5b823c.msi
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target 8397f26f4d5b823c.msi
- Size 856KB
- Sample261030-d7pm1sdb77
- SHA256 8397f26f4d5b823c64d3411115d1949029469f1c0ad5c4ea67c38e7ca0cf3930
- MD5 834cbef4a38cf885d087fd4adee4b9f1
- SHA1 c54cfd2783bbe3f0eb73f4c7230f30c0b94f9483
- SHA512 098e1fa518e12abfc1972df73b874ddfc572ea21de485e6f2a37dfcb06ea5a8a1591f655e039423c3bd7617b374de41ec4b1b132769c7889c5a635d8a0ffcf52
- SSDEEP 6144:g2aIkBjfIF5o26wzPJPYThIvI3CyTnF9N/mDT:fkZG+rAhP0hxjZ
- TLSH T1A615FE45FE3FFA3BE2182078652833A925FDBDFE4D45A62916C22E647E50690DD1033E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 3564 msiexec.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeShutdownPrivilege 3564 msiexec.exe Token: SeIncreaseQuotaPrivilege 3564 msiexec.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3564 msiexec.exe 3564 msiexec.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3564 msiexec.exe