Overview

overview

7

Static

static

5

GovCracker.exe

windows10-2004-x64

7

GovCracker.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    64s
  • max time network
    73s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 09:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    GovCracker.exe
  • Size 152.2MB
  • Sample261102-lyxw2aa14j
  • SHA256 47af25983d05a72239c8571cf9ac203ddac8a36eac5a29a6c2088a9fc666d652
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GovCracker.exe
    "C:\Users\Admin\AppData\Local\Temp\GovCracker.exe"
    1⤵
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of AdjustPrivilegeToken
    PID:2464

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\GovCracker\m5S2E5cAidkz\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationNative_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\GovCracker\m5S2E5cAidkz\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 42e2e543c17e1b37499baf00d956433b8afb655348ec0fae89c926fb7d149b6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpfgfx_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\GovCracker\m5S2E5cAidkz\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 501a1cd67d51bb1663870b12af0f8c0ba29b3d37b8b509be896d2aaf32db214a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa-regular-400.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\FontAwesomeFonts\6.1.2\fa-regular-400.ttf
        • Size 60KB
        • SHA256 bba965283e057f0710082ae111625ae011b5178b43fd62b1841df82172bc0f6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa-solid-900.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\FontAwesomeFonts\6.1.2\fa-solid-900.ttf
        • Size 388KB
        • SHA256 5c94f251750d77835a42c49351881c147569eb19b10f4faa148165c5fee5ba45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download