Analysis
- geolocation tags
cacanadananorth-americatoronto - user interaction
yes - max time kernel
12s - max time network
5s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/11/2026, 23:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
client.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
client.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target client.exe
- Size 1021KB
- Sample261107-3dmc8ssv9p
- SHA256 7967e07f87dc32266269601b6676e649f7a2690f967045f3c632487a97aa613f
- MD5 3b45b118f0d2998f14c6a3955bce4126
- SHA1 2d0e6fef78f11f38caa8090944733803dab7d853
- SHA512 855d3e5b55b021c09ee1071698605d421ed3e7c53e8b57d587436f44f1e6c5a9c939437108b126ecbdd1aba6a204b41986d3b386734ca5a7f2767e8762085cb2
- SSDEEP 24576:zAolOETP26kNhNsp95KvO++xIyaiJnit6LU:MoDy6YhNsp9kvlsJnM
- TLSH T17125AF51F2E801FDD137D174D9AAA60BEA32381507209AEF13D05A992F777E05BBB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3292 client.exe 3292 client.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3292 client.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3292 client.exe