1a157639b383419ed5edf69520c421f3bc2de64f08a00df69007be49f783dc8b

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/06/2026, 04:28

Target
Nature.exe
Size 3.6MB
Sample260625-e36leahv2p
SHA256 1a157639b383419ed5edf69520c421f3bc2de64f08a00df69007be49f783dc8b
MD5 953a1326df779d73e4a139ded4141255
SHA1 e35163e3259e2fc4b748cf32a418f6f5a1a94713
SHA512 6fbe4ac82f5bc4fa96a1f2c43e6f9a3aa93d9ae3c022da477cb23ed1cc949d485cffceadc081007ae4283ecc03ddd878376d30c1fc6b864733bfa08bb25abbe5
SSDEEP 49152:y+U1AQ3tYa2xyX+G0JKTOr2WSNPXP11RAnFUeIp+mGTCDG2GrtsElKkegqzIL0o:4zOEjsu/zgpEG24xKkszIgo
TLSH
T12A06CF92F39141E8C667863C8663EB17E7367C051B115BDB3290BA252F33BE16B3A351
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3296	Nature.exe

C:\Users\Admin\AppData\Local\Temp\Nature.exe
"C:\Users\Admin\AppData\Local\Temp\Nature.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3296

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4ac 0x2ec
1⤵
PID:4492