Resubmissions
13/11/2026, 17:52
261113-wf48haes5p313/11/2026, 17:49
261113-weew8aet6v1013/11/2026, 17:48
261113-wde6laet5s10Analysis
- user interaction
yes - max time kernel
116s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/11/2026, 17:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rythm pad (3).exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
rythm pad (3).exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
General
- Target rythm pad (3).exe
- Size 1.1MB
- Sample261113-weew8aet6v
- SHA256 ad50ea8eda7c30ee43e410f7a11c21b80aa2e6d67245e4b9498f7748ed2303b2
- MD5 fd7edf3bc129d5868d9a1e82daffb0c9
- SHA1 b8772a1b1e05cdee9cb45a913c7179f3f7e69177
- SHA512 577ed5d1872eb3a8a96d7363f6bf0a23a21eb1c77cb6086ae111e8c9614a5f1edba163f6b10f1d36be01a26c7f9beef8366b073a6934f4e089f047cae7b88bdb
- SSDEEP 12288:Tbs/m0E54jwaFXGc8lEBBBHGBKq2IZwDdvfqItNqdg:TbOVE5ifGPRZwxvf3fd
- TLSH T1F8357C83E7A385D8C116C9B5534BF137F9627C8E4B157197ABC41E633A67BA4E22CB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString rythm pad (3).exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 rythm pad (3).exe