3ba31e83a49e1f514f970e12d9776a4035eb05b0b187a797068baaaec8b14775

Login
Reports

Overview

overview

Static

static

HFkiller_f...ll.exe

windows10-2004-x64

HFkiller_f...ll.exe

windows11-ltsc_2024-x64

HFkiller_f...ps1xml

windows10-2004-x64

HFkiller_f...ps1xml

windows11-ltsc_2024-x64

HFkiller_f...ps1xml

windows10-2004-x64

HFkiller_f...ps1xml

windows11-ltsc_2024-x64

HFkiller_f...ps1xml

windows10-2004-x64

HFkiller_f...ps1xml

windows11-ltsc_2024-x64

HFkiller_f...le.ps1

windows10-2004-x64

HFkiller_f...le.ps1

windows11-ltsc_2024-x64

HFkiller_f...ps1xml

windows10-2004-x64

HFkiller_f...ps1xml

windows11-ltsc_2024-x64

HFkiller_f...at.ps1

windows10-2004-x64

HFkiller_f...at.ps1

windows11-ltsc_2024-x64

HFkiller_f...ds.dll

windows10-2004-x64

HFkiller_f...ds.dll

windows11-ltsc_2024-x64

HFkiller_f...ts.ps1

windows10-2004-x64

HFkiller_f...ts.ps1

windows11-ltsc_2024-x64

HFkiller_f...ll.dll

windows10-2004-x64

HFkiller_f...ll.dll

windows11-ltsc_2024-x64

HFkiller_f...er.dll

windows10-2004-x64

HFkiller_f...ng.dll

windows10-2004-x64

HFkiller_f...ng.dll

windows11-ltsc_2024-x64

HFkiller_f...es.dll

windows10-2004-x64

HFkiller_f...es.dll

windows11-ltsc_2024-x64

HFkiller_f...es.dll

windows10-2004-x64

HFkiller_f...es.dll

windows11-ltsc_2024-x64

HFkiller_f...px.ps1

windows10-2004-x64

HFkiller_f...px.ps1

windows11-ltsc_2024-x64

HFkiller_f...ss.ps1

windows10-2004-x64

HFkiller_f...ss.ps1

windows11-ltsc_2024-x64

HFkiller_f...ps1xml

windows10-2004-x64

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 12:15

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

HFkiller_full/HFkiller_full.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

HFkiller_full/HFkiller_full.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

HFkiller_full/ps/Certificate.format.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral4

Sample

HFkiller_full/ps/Certificate.format.ps1xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution ransomware

Behavioral task

behavioral5

Sample

HFkiller_full/ps/Diagnostics.Format.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral6

Sample

HFkiller_full/ps/Diagnostics.Format.ps1xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution ransomware

Behavioral task

behavioral7

Sample

HFkiller_full/ps/Event.Format.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral8

Sample

HFkiller_full/ps/Event.Format.ps1xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution ransomware

Behavioral task

behavioral9

Sample

HFkiller_full/ps/Examples/profile.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

HFkiller_full/ps/Examples/profile.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

HFkiller_full/ps/FileSystem.format.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral12

Sample

HFkiller_full/ps/FileSystem.format.ps1xml

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution ransomware

Behavioral task

behavioral13

Sample

HFkiller_full/ps/Help.format.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

HFkiller_full/ps/Help.format.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

HFkiller_full/ps/Modules/AppBackgroundTask/Microsoft.Windows.AppBackgroundTask.Commands.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

HFkiller_full/ps/Modules/AppBackgroundTask/Microsoft.Windows.AppBackgroundTask.Commands.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

HFkiller_full/ps/Modules/AppvClient/AppVClientCmdlets.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

HFkiller_full/ps/Modules/AppvClient/AppVClientCmdlets.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

HFkiller_full/ps/Modules/AppvClient/Microsoft.AppV.AppVClientPowerShell.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

HFkiller_full/ps/Modules/AppvClient/Microsoft.AppV.AppVClientPowerShell.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

HFkiller_full/ps/Modules/AppvClient/Microsoft.AppV.AppvClientComConsumer.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

HFkiller_full/ps/Modules/AppvClient/Microsoft.AppV.ClientProgrammability.Eventing.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

HFkiller_full/ps/Modules/AppvClient/Microsoft.AppV.ClientProgrammability.Eventing.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

HFkiller_full/ps/Modules/AppvClient/zh-HANS/Microsoft.AppV.AppVClientPowerShell.resources.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

HFkiller_full/ps/Modules/AppvClient/zh-HANS/Microsoft.AppV.AppVClientPowerShell.resources.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

HFkiller_full/ps/Modules/AppvClient/zh-HANS/Microsoft.AppV.AppvClientComConsumer.resources.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

HFkiller_full/ps/Modules/AppvClient/zh-HANS/Microsoft.AppV.AppvClientComConsumer.resources.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

HFkiller_full/ps/Modules/Appx/Appx.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

HFkiller_full/ps/Modules/Appx/Appx.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

HFkiller_full/ps/Modules/AssignedAccess/AssignedAccess.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

HFkiller_full/ps/Modules/AssignedAccess/AssignedAccess.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

HFkiller_full/ps/Modules/BitLocker/BitLocker.Format.ps1xml

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Report Analysis Logs

General

Target
HFkiller_full/HFkiller_full.exe
Size 12.3MB
Sample261113-pexnpsbt4v
SHA256 3ba31e83a49e1f514f970e12d9776a4035eb05b0b187a797068baaaec8b14775
MD5 5f5ad376c198f0d8401c4c651e35176e
SHA1 7cc3c367218dee1e526ec48ce1ee97b8de724ae3
SHA512 81c4c406a8d850809b05b1c9295d789acdc8bfdef324c80bb3e18fdb01b30c7ac48ac4ceb32178322dd3908cf18b767510138d1855740a53f720e7b4f67fbe10
SSDEEP 196608:CMDqObBmfud2q2XBEUs81uVdcc+rk84C7djGzVTNM88kydKV3:COqObndt410ycQk84C7IxTNekyde
TLSH
T17FD6AD56F3F801A9E5BBC178C5674517EBB2B8451320E7DF45A08A692F23BE06E3D321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\HFkiller_full\HFkiller_full.exe
"C:\Users\Admin\AppData\Local\Temp\HFkiller_full\HFkiller_full.exe"
1⤵
PID:244

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads