54ebaa1a80c2c9e91f1357e55981e54598bdf1de20a5df1d8f17dd21ad834d68

Analysis

max time kernel
150s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/06/2026, 21:29

Target
input.exe
Size 87.3MB
Sample260619-1cdzcsbx2m
SHA256 54ebaa1a80c2c9e91f1357e55981e54598bdf1de20a5df1d8f17dd21ad834d68
MD5 c5f0118dfaddc20aa8e764f4eac51b0f
SHA1 8c6e358cb56542bc190b3feff345cf3e0de9126a
SHA512 2e3c637db6dd19c0146228c84a09f3903e8003938a9c8da64ff80ab5d33dd773ac629bee8767488c9a7398f125c97a7073ff9e418cb2e1ab7f547e82c722c974
SSDEEP 1572864:MpjM/f6Ql9U4ZoPNozLDfX6aU7NqV5QJSeBtmxwOimGGROkaKDQsl6c:xfnlOqzLDv6a6qHMtdQLDQc
TLSH
T1911812D528E151ECC4868534D24A3AFEE1C538AA4DBA742FBFD65402F630C96CCE5E36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1020	input.exe
1020	input.exe

C:\Users\Admin\AppData\Local\Temp\input.exe
"C:\Users\Admin\AppData\Local\Temp\input.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1020