Analysis
-
max time kernel
156s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 03:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
26b0b26537f0096e8a59071de24c38d9.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
26b0b26537f0096e8a59071de24c38d9.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
26b0b26537f0096e8a59071de24c38d9.exe
-
Size
2.4MB
-
MD5
26b0b26537f0096e8a59071de24c38d9
-
SHA1
bb252bf896c4742b13daa53f48077759c9131c13
-
SHA256
c4b7b7321b54123b8a46600bc122fec7a135b62d049d1b6ca8a79b9db24de433
-
SHA512
a1bad0b712ec420043c4e50111022333a0e08ea651c52d6936e7466ee1bebf1e33bf58be741d755bc7d15e5bca40a679fffafd4e68ceb7f8f95973a530ae2208
-
SSDEEP
49152:FkBVTUwIiTVOvTQI+CPVFKKUFwSoNAd19vVOx8uoU9XmP3f5:FuUQIvpVw399OiuzXmPP
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2532 26b0b26537f0096e8a59071de24c38d9.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2532 26b0b26537f0096e8a59071de24c38d9.exe 2532 26b0b26537f0096e8a59071de24c38d9.exe