374d011ddb0ecdae96ad5ae1cfbd1929c9ee7841959075ab71ef6a93cae69fd3

Analysis

user interaction
yes
max time kernel
20s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 00:29

Target
loader_serenity.exe
Size 41.9MB
Sample260508-as3dsafw6q
SHA256 374d011ddb0ecdae96ad5ae1cfbd1929c9ee7841959075ab71ef6a93cae69fd3
MD5 0c48c0db55073b836aade29e28f2d22e
SHA1 2ed904a3bb4bcc73bd4b5f1f4e8bcfd1e3401c4e
SHA512 5019e25d626e5f5de3fc7023502446f384aded8fd9db20e69f8b67b2d2cdf65d9610e1b73349cf931078e492ba8b46f36f0585a214b3ff95185772628a4ef19d
SSDEEP 786432:1YNzJeEfT7h8DTIxGTkbj96/m+YLaQs6TW9+4dlsx1O:1YvL7eIx046is6F4oG
TLSH
T150A73357E5DA626BC4C20040A247418A71D0D5BD81FF8A1B3BCE6C0EA907E6F16DBF76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3984	loader_serenity.exe
3984	loader_serenity.exe

C:\Users\Admin\AppData\Local\Temp\loader_serenity.exe
"C:\Users\Admin\AppData\Local\Temp\loader_serenity.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3984