Analysis
- max time kernel
150s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 09:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
osuPoint.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
osuPoint.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target osuPoint.exe
- Size 596KB
- Sample261102-ls36vsvs3l
- SHA256 077372036b57cff7664413bbc8ee3a8d0d0d93017a7e41d8650160d6d551235c
- MD5 6949407099bc36e4e4c5fc3b97424baa
- SHA1 f390cd84e21e8d43e5a54aea0340c97dff40f97f
- SHA512 862e6ba29edad8308c496645500db002e76a7c999fa17f57c495761d3e135b87341ab1999fd3535af8d2cbc1e08ffcfba9effabe91521ac1d8c94bfdd9731380
- SSDEEP 6144:xjBW914hMVroPBWs2BdBlV1nSGYGpATf5K2CRL1LAt/DYR9XiqgOak1UMWtXvEbr:dBW9GhmNlCOpaK2edA5NqAeUMWt6h3V
- TLSH T149D49E05B76413FDD567C2B8C9174A42EB72F84A03706BEB039089A62F276E45F7E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeIncBasePriorityPrivilege 684 osuPoint.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe 684 osuPoint.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\config.ini
- Size 621B
- SHA256 5ed1460fe9215b680924a2a653494fbcb9d22ebc2fbc587dab610c5603654c6a
- MD5 b8f10358ff61fa4b3e342b99780f827e
- SHA1 862c84fd40462685aa3f3175755113082aaec727
- SHA512 b04e0790559628f82eed661d3046ad4c8b7a13c72f7f9b9b213af40b5ece2ce605a9c22522dc5b34372532e89743e982f5adebc6467602d78066a043322cd120
- TLSH T1EFF049121322D67F44219BC370FF52D8E1F4E4D80A617648955A74F23D4F4532A6E66C
- MD5 SHA1 SHA512 TLSH