Analysis
- max time kernel
36s - max time network
35s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/11/2026, 08:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
airat3.exe
Resource
win10v2004-20260911-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
airat3.exe
Resource
win11ltsc2024-20260911-en
1 signatures
900 seconds
General
- Target airat3.exe
- Size 566KB
- Sample261110-j8fdmaea69
- SHA256 4f3381a063062a9967b1e4edfdc751b14db2a66e58661f76c4b374faa5ea43ee
- MD5 e45016a51e9b4f019b5508396084ce47
- SHA1 cdbb72568e3f09d24d4f700461b061a4e75bd3b1
- SHA512 de7bfd96085ed28fcd9f48436897477bfd226c20afc558a3e0e9b87da46cb4f4a25e9dce50591cc0c66a25bccdb6fe382a7d834edc225598df8a4aa2fe5f3c41
- SSDEEP 6144:mjB8e/fkxIE1cGhwUNGA4erN1N2D4yD0KXe0tcBHUWq+9yN86IpKIGlAvZq2qB9W:m1fII+akrN1NW4yD0NwgQFPSHQ7rpqz
- TLSH T106C4288326DB1CFADA536B3C91DB533AA734FD604B6A4F2B4918D2310C235D0AE5BB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 6088 airat3.exe 6088 airat3.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\loader.log
- Size 135B
- SHA256 3f92935d295ee233046857a5ebd0e35f075499eaa1f4cbe72e10b5d0df69ca48
- MD5 d3323320e3d435a37ec7a057afa37802
- SHA1 cdbdc68885873fc85f91c433a3308a5af3b5cd30
- SHA512 6643c72a954c59b969fabe918628d853090260fadfb4a3dba0e8b7e8e3183f9e96db17a29d8baea79d75c106712ec73c27003240f7579aefc9a7b25714335882
- TLSH T1B2C092C922C0018A7C2489C0E02FD13810A40A0BDF0441320B2853C664BDFE75E01E3F
- MD5 SHA1 SHA512 TLSH
- Path C:\loader.log
- Size 738B
- SHA256 693c50b94e38a702ed2d2839dba5c49d23f4e8f916f2220c4df59b05e9a8d129
- MD5 d3ea85b716593b73027efa21d2675a15
- SHA1 d572fbeadac9f55626c79b84eed05eb52d25f24d
- SHA512 2c9e0b95d78c790302dc6009801efd2bb95f7d7cebfc4de75b381a1db1f62dc9193bfb42489be64a2480cd56544cbf5c4efcf476eca48514b625ad2fa0f0d5ec
- TLSH T179014BF2D5C07167FB575C82E29F922C156BA14ACB104522C76F13D3DB3A9A3DD02A2B
- MD5 SHA1 SHA512 TLSH