Analysis
- user interaction
yes - max time kernel
150s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 02:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
skeet.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
skeet.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target skeet.exe
- Size 17.6MB
- Sample261102-dcawdaev6y
- SHA256 35c699067bb823e4ab1efb5fbb3ae65ceb65f721508494ec31332b80d0fb3ec2
- MD5 7a8d935e859a6a3a6e0391d7a7f439d1
- SHA1 b62a6e3df272ec84d17d899de2189d79b94c2487
- SHA512 8167640e35c529eadc6f6182381000d6ae03ac92514b9e33c02eec6664019ec46551152a60e0ee89a40bd7432f68cae5023fdab25637921bbe59b96527ab63af
- SSDEEP 393216:a8wx2CNvG3jsciIZwYpO54sfgkz/5EKy+:a8wxw3jpZwQVsfgE/Fy+
- TLSH T18307E002F79640BDC066C074D787977BE161344A0B316AEF27C46A242F72BE09F7A766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings skeet.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe 4172 skeet.exe - Suspicious behavior: GetForegroundWindowSpam 2 IoCs
pid Process 4172 skeet.exe 3356 OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3356 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\skeet.exe"C:\Users\Admin\AppData\Local\Temp\skeet.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:4172
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3356
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Desktop\skeet_loader.log
- Size 460B
- SHA256 8259cce3a4d661cfbe4ba457ca713d65fcb9560d7471135cb5082398bd4f27db
- MD5 8aae824009cb73a579ce045d4b56aec3
- SHA1 09c10a599a999813c7a749896aa62ce63cd73fa5
- SHA512 94f4fec28d55d26cf6f5c9661f8f35a77184ca1b365fc0eabd533714c90ea9aa5b439db8fe4a9a770661a79d51ad7943189bd5318a559bf3ad8953c3e83ad6e8
- TLSH T1E3F0AEB42154B4B70F81570CC26C3FCC9D5A9265113EE8D577E8DD164531D2C7FA5911
- MD5 SHA1 SHA512 TLSH