Analysis
- max time kernel
149s - max time network
103s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
27/05/2026, 14:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Release.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target Release.exe
- Size 35.3MB
- Sample260527-rt3vdags3n
- SHA256 a8673046ea68aaa98aa8e7c0aaff510d6c812cb22804417d7f71999a535d168c
- MD5 953f3d60510d727e0039f58f56335497
- SHA1 2a905c8586e33d3b3fa0a63eefe833b7a2c00cf5
- SHA512 5f6a71207f737be28ea1f247d26b6a5c76ebf05cb74ff0aa5374591ae14ec8e2b5a407bb320c833cebdc116df1dc9001a3214a6b466c622c35aeb26ef1ba6984
- SSDEEP 49152:fkyOWdSlicV8KdMyuh+ZGPE4wy90Aknla:fYHsM9UPdVhSY
- TLSH T185878D0B6CD504FAD4A653328DB662927B76FC4A0F3227D32E50B2382FBA6D49D75704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4900 Release.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4900 Release.exe 4900 Release.exe 4900 Release.exe 4900 Release.exe 4900 Release.exe 4900 Release.exe