Analysis
- user interaction
yes - max time kernel
898s - max time network
505s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
07/11/2026, 11:18
Behavioral task
behavioral1
Sample
ThomasJepp.SaintsRow-rev128.zip
Resource
win11-20260911-en
0 signatures
900 seconds
General
- Target ThomasJepp.SaintsRow-rev128.zip
- Size 954KB
- Sample261107-nesjbaxyav
- SHA256 82522a9f759116c263c5fc7c2d2be906b645eaaef5ba51052a2f64936410026e
- MD5 2c68e79b5caf6ac18eae3ab12220cdbf
- SHA1 e58f49da40d7e09a6dc72ba4423b5128ddc09bd1
- SHA512 13e094971244e0be877223eba24fac846925dd4d2d4b45515ea8c526d4ee5732bb3cfb47c773e0be6cf3d8a45d299272dca5ba2d502ec69cda82a101186756d2
- SSDEEP 24576:yzBj7bis3Lsu4bE2X1MTQtRtXt5nRSAMQtRtXt50+Ld:yBX3AjRX1UQtRtXr85QtRtXQ8
- TLSH T125252366E3A74E24CC7B7DBD1D180B58683250C50BA6B27DC4D4BE6ED814FE8E70B612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\ThomasJepp.SaintsRow-rev128.zip1⤵PID:4000
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1528