Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/05/2026, 15:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
qwe.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
qwe.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target qwe.exe
- Size 8.7MB
- Sample260506-stdqxsdw9y
- SHA256 ed2bc55a04762c40b3fa4e26fd566887926094d05ab0e37f4db597b562798bae
- MD5 366cc615a417f92d2ceb2715a62cb9e6
- SHA1 cff2a044685711426a0d343226e7f623c1e7bf9b
- SHA512 3f8b5faa2b8251a06c2aa3d8a0765a46ba3b633719864fdd7b03237a373862cec88d0c617a9d00ce4efdd01b4262676f6b6755e74fa2cf2015a286adb7b00b2c
- SSDEEP 196608:h2Z/5x0NDQCFOgd8zEJyUdELI2d6d3NJKJqyhuAFFdX6MeXXeGgilFQKaY5E7hRE:EFX0VQCFOK8zEJnd4gKJqyhuwbX69XXK
- TLSH T13096AD0B673CD220D17B5ABC2150CA8417E505169F92DB52ABC96DC31AE2FDE5B3B0CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 484 qwe.exe 484 qwe.exe