a52874d90623b743c47a24b7b34aef8dbd5ef26a32c3cc19f3709e246c2e5e25

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/04/2026, 04:36

Target
a52874d90623b743c47a24b7b34aef8dbd5ef26a32c3cc19f3709e246c2e5e25.exe
Size 12.8MB
Sample260428-e8nb1sgw5l
SHA256 a52874d90623b743c47a24b7b34aef8dbd5ef26a32c3cc19f3709e246c2e5e25
MD5 a3a5452b77b74f392e1f6fdf84513da3
SHA1 f1ff1b27f4c9bf839f3083b080ec7dbe737335b4
SHA512 488c16ddb39581cdeefeaf2ef2b9c9967b05aefd6d11b28a9f09d302b7c0127be897ef20bb3e56bf00a0110199318dd29f3ca28bfa7a42eadf71cd2968b5eb8a
SSDEEP 196608:XbJVrvZfb7vUvq+MwjuRogVC7D4ivsusXHSn/AjTxHXJ+UuejZnd4f:X99Z5zwVgNis7EUu2gf
TLSH
T171D623EE52E692F5C0929610E58A43DEB8C0BA0C45FD4D2E3DC72D015B14CAB654EBFB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4012	a52874d90623b743c47a24b7b34aef8dbd5ef26a32c3cc19f3709e246c2e5e25.exe
4012	a52874d90623b743c47a24b7b34aef8dbd5ef26a32c3cc19f3709e246c2e5e25.exe

C:\Users\Admin\AppData\Local\Temp\a52874d90623b743c47a24b7b34aef8dbd5ef26a32c3cc19f3709e246c2e5e25.exe
"C:\Users\Admin\AppData\Local\Temp\a52874d90623b743c47a24b7b34aef8dbd5ef26a32c3cc19f3709e246c2e5e25.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4012