0882df851864a0bb890c77d2d0485709274cd5862fe91e778c377cfeef98ef5a

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/04/2026, 02:01

Target
nfc9lGQSMLHStz.exe
Size 20.2MB
Sample260424-cfyaeact9v
SHA256 0882df851864a0bb890c77d2d0485709274cd5862fe91e778c377cfeef98ef5a
MD5 bac3917aa0a491ee48ec49d65470c2d4
SHA1 c877aafaad97fa8878abb179747ce963415fdce8
SHA512 b962bb1812d10c370ae1c948795c306c675c4798cb8d49ac6252ebc314b9127416c4612439087f87484cc868338fefd4b42349b36a08cc04e477fc20fcd89408
SSDEEP 393216:DiSXFboNGh443U9Uj1Oy/gN3V2a1j/R9x59sBxNtJd6O/sYpVf3VM2:DnVbEW44YURZ/a30ILR9x4BXzXHVM
TLSH
T15027F14D67326EA324639875D413017288DC379DEB7579A14EFECA122B6C930B76C3CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
4516	nfc9lGQSMLHStz.exe

C:\Users\Admin\AppData\Local\Temp\nfc9lGQSMLHStz.exe
"C:\Users\Admin\AppData\Local\Temp\nfc9lGQSMLHStz.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4516