9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28

Analysis

max time kernel
148s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 08:19

Target
9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28.exe
Size 351KB
Sample260706-j7261ags2m
SHA256 9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28
MD5 27c4055af41998fe56b24d4689da0e48
SHA1 8319af7ee80a527da7098d3a18a21f3ccf76a21f
SHA512 a85be93890a997082c88bc705a7dcafbfe23081564bf10cd80fb439ac1d6865d06a6950bfaf2e8e5283bbc095e09e98af056092ea20f8a66554dc4493c03eed8
SSDEEP 6144:CrtPYijoYFvmVooy/ok9sJoV5eVEvuEuCIUOzI8:Cr+ijodbyQkL5IEjWzI
TLSH
T1E074F19B72B934FCD6B78639C4550909A3B2F8320B619BEF03A546161F376E15D3AF20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2680 set thread context of 5684	2680	9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28.exe	88

Suspicious behavior: MapViewOfSection 1 IoCs

pid	Process
2680	9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2680 wrote to memory of 5684	2680	9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28.exe	88

C:\Users\Admin\AppData\Local\Temp\9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28.exe
"C:\Users\Admin\AppData\Local\Temp\9259e263c46edcadaca2671b1d049dc2039bedad9a8b791996294cc363edbe28.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:2680
- C:\Windows\system32\notepad.exe
  C:\Windows\system32\notepad.exe
  2⤵
  PID:5684

memory/5684-0-0x0000000140000000-0x0000000140044000-memory.dmp

Download