Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
06/07/2026, 12:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9f31ca01.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9f31ca01.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target 9f31ca01.exe
- Size 2.8MB
- Sample260706-pcrdxaew9t
- SHA256 3fb57aefdce6ca08e2f49f66812c2ae22973eeb046d85b7da6b8cb25980ee190
- MD5 b63e614867c9c7ebe522413e7d34c73a
- SHA1 74284df3fa1b0df408dee9bb86de7610b340efe9
- SHA512 52a8d61f9da1e7278b376452801f4c6ea0b5b4ee0199120712ffbab2009604aff69fea3b9bf7b0018c8208b13bc9b012a7aa2d2a832239c43c278e6bad4bd797
- SSDEEP 49152:qiUybfYymrBVMa2cVB/xIlRusNTtODhqF:qiRmxVB+A+Olg
- TLSH T1BAD59E0B6DE04AE9C86AA33199B65296BB31FC094F3163C72E50B7782F36BD09D35744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2964 9f31ca01.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2964 9f31ca01.exe 2964 9f31ca01.exe 2964 9f31ca01.exe 2964 9f31ca01.exe 2964 9f31ca01.exe 2964 9f31ca01.exe