Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 17:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
install.1.2.02.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.1.2.02.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target install.1.2.02.exe
- Size 32.4MB
- Sample261030-v2s7pafa86
- SHA256 2eb34405136221f09145bf7fdde2cefd901ab4bdb34e1b6f35f906de2ccbe91e
- MD5 111b1e34d5611fe6fbdd8adab1cdcf19
- SHA1 5c59a29b5bb63b7bf4c35233d06575af26bd3664
- SHA512 fa81643f70a5f1f905fa74785d44a697641e495bc19d39dec683432f6318a443ce789890c1084597334a36c08aecaed2c757866e8bdf127e1878ab91fe0f4e19
- SSDEEP 196608:SqEfM3r4vGOgAVAiZfFK0SBqtiEPFNPTi:a6qpG
- TLSH T143770646FA414DD2F85846F588ABB7A023FEBD7582D1C30721D87325AFAF29C0E93195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname install.1.2.02.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain install.1.2.02.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 5880 install.1.2.02.exe 5880 install.1.2.02.exe 5880 install.1.2.02.exe 5880 install.1.2.02.exe 5880 install.1.2.02.exe 5880 install.1.2.02.exe