Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/11/2026, 19:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EasyMacro.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
EasyMacro.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target EasyMacro.exe
- Size 105KB
- Sample261110-ynhetaaf59
- SHA256 08f373b55c207c6c92683f48c336e867c6a12ca3aced905f5c77f2bb26d8a28a
- MD5 9493bd45f1517f0763479f5ec7739259
- SHA1 47bc00f10170823e531654298f12a85fe12cb033
- SHA512 a7139fb3161a2c7d226abb2b93c3058e35b444b882358868ae762eccd69452afbe09a2058faaeaa757604b0c50a004c2f576a58719fce528bd379e1bc0f74590
- SSDEEP 1536:pVB/x351csKvpd5/5BmCl11111h1111xSCEX1fguxMTqm+4ok+j:F18ZvpTvXSbXOBGme
- TLSH T173B3F9E1D78751E2F89A5871CC338D4BDDB1FD81A8A95A1F01683A1D5E3B732980B327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4912 EasyMacro.exe 4912 EasyMacro.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4912 EasyMacro.exe 4912 EasyMacro.exe