Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/11/2026, 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BlinkText_Portable_v1.0.0.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
BlinkText_Portable_v1.0.0.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target BlinkText_Portable_v1.0.0.exe
- Size 4.3MB
- Sample261107-vb6p4afd66
- SHA256 9d8dea39c654f819622e3da01ad0f1571186d1fbbe4a7793dcc626e65d51750b
- MD5 cd917d03654873408f6a250a480905d6
- SHA1 f9036fc6611930eb731c56beea8a4a3b16dc562d
- SHA512 825d13d002f5ed09ec8f61604c69c4540cc57a7aedc94efd1712785538ea58b619d9444c09fd8e6d52510df7180fa7d30d88e25c36c2745f1f077888cc72d127
- SSDEEP 98304:+61hWxcHUFRRJAWAyP4DC/IWAAuYcn8kuPrl:1+cHUtiG4DCRAo
- TLSH T1A3265C4369DB0DE9CED66BB861D36336A734FD35CA391F2BA604C23129536C46D2EB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4828 BlinkText_Portable_v1.0.0.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 4828 BlinkText_Portable_v1.0.0.exe 4828 BlinkText_Portable_v1.0.0.exe 4828 BlinkText_Portable_v1.0.0.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 4828 BlinkText_Portable_v1.0.0.exe 4828 BlinkText_Portable_v1.0.0.exe 4828 BlinkText_Portable_v1.0.0.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4828 BlinkText_Portable_v1.0.0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\BlinkText_Portable_v1.0.0.exe"C:\Users\Admin\AppData\Local\Temp\BlinkText_Portable_v1.0.0.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4828