Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/06/2026, 10:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup-1.5.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target setup-1.5.exe
- Size 788.0MB
- Sample260625-mt2vvsaz6v
- SHA256 5d980a6b2ab38ad5d1e23f8592077d93305e4fcbaf82e2e325977ef48b98cb75
- MD5 29f64d98f72834f4b73d681ecccb864d
- SHA1 5408d72ca41e3342cc8e61edf96b83650e955dbf
- SHA512 bc9c59a9b189d5e0e417a0a01cea126d5ebd0a0706c3907309ff6cb13dca66e540e9713076c2b9da570b9e49509883882ddc4c2046a28cd20f7b4fccb401f4de
- SSDEEP 24576:02W3Vs3m4e+xeJDIEWiX9TMt9Q9j+otBclY3ilEEsWy3+SXtxzBele5rK2mM48Fl:02Wls24e9JsENBM+zqpa35436
- TLSH T13A89AE1B7C9048F9D8AA573998B661857B78BC050B7613CB2E94B3782F723D0BD79B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4852 setup-1.5.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4852 setup-1.5.exe 4852 setup-1.5.exe 4852 setup-1.5.exe 4852 setup-1.5.exe 4852 setup-1.5.exe 4852 setup-1.5.exe