Analysis
- max time kernel
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 22:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Just Monika..exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Just Monika..exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target Just Monika..exe
- Size 165.6MB
- Sample261113-13f7eahs9z
- SHA256 58715e9d58cd28a3409a9ef7a35c1327662c353b68d391ed2621a31198bfaedd
- MD5 4f957304258c23eb6b40c22160371893
- SHA1 4510e054be9a6e8249a2167b5c7aab2c7babbabb
- SHA512 8803d67a90b26567b3506805168da640399e2ddfe2ecb10538ac7399a7fc5a486c9482916d17c0c5e5ff307fc725471c85a476554a6029609c53f0d6c19c38d7
- SSDEEP 786432:hFLC+KmFa+U9LvtoH3zCMVf4maLaEvH6APJeVFlLUMF5w9XR7yL3W0kkmx18L7JS:h1bzFaX+ahH62eVFdvw9XR7yLm0kkhtS
- TLSH T1E6888D11A3E81A55E27B827897738661E6B6BC535311C2CF0094FD4A3F73BC1AA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 3364 Just Monika..exe 3364 Just Monika..exe 3364 Just Monika..exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3364 Just Monika..exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3364 Just Monika..exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\Just Monika\tZQicnGdlsCP\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Just Monika\tZQicnGdlsCP\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 091609705a031d5832f21548291c2670f06eadd781d465d3e1a5fad3772adc91
- MD5 76c57f8f951306b6fe29c83f9844cb6f
- SHA1 9aa8c8bf7af042ac0d95f6169d71a5ddd6a0cc4c
- SHA512 019050f80430ae459e6fd6ffce5cbff4af49073834169d40083f6a9b22abebac1d605ab8b409449d4313a3bea08bebfc62c9b93905bcc327e8b20016414133c1
- SSDEEP 24576:XjOnXauaPQDzcpsVOE4PU5tbg5ChWmAjHSa+YrHAvlFk8TQh6p1zwPwYffvhXYj5:ZuaofcpsQ5PU5ZhWmAjHjAvlF5QhURwA
- TLSH T10A453A22D2E642E5C47FC1B8C646972BFBB1740A131C66DB47608B592F27FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Just Monika\tZQicnGdlsCP\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 48a8e8100fd38183a0fabfe7fad0bf9e9d28d65a0827298ef0910b31e6e94cbd
- MD5 166071812e6b057343ab6e1a1f86d99b
- SHA1 a6cdffb36ca662810dc1f2f7abdd0142d892b0e6
- SHA512 3fa553b141a062b7d466bd2bc1c896ae2bebf09cadd1d9263c7fa837e3514e53695a08caf34d621c4a309bdcfeb0471aa6e5abd558e7fbbd7d75a1c8cfd96056
- SSDEEP 24576:JyRODwFC9CCgNeccEi/aRmE6xdyo2QL5pbhAj7twvEebfaL6kKaiPvpblyfN:dwkUNNeco/auxZLPFAjGvEebSL6hhul
- TLSH T157954A4AB6AC40E9D07AE33CD9D7861BF63178152761A3CF23A4479D6F27BD0097A360
- MD5 SHA1 SHA512 SSDEEP TLSH