Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/07/2026, 03:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
General
- Target file.exe
- Size 2.8MB
- Sample260708-d4ezeaaz7m
- SHA256 f8c56b8a1ecfa06186f0d1dc3e566223aba52e282dcce895d493cbe78d9db512
- MD5 78039a133fe132a8d1bfe231649ae463
- SHA1 9f4aa0f7bd9dfb8ae72a6e108b7fec2a434ed91e
- SHA512 477af3e8048783c5e66f87c0e156b9fae93ef2e61f134457b207afb869905dedab9d98705d9711cc6df61b88c1c2ef33d615c11684d23260499eb39b0d371d0e
- SSDEEP 49152:WRXjM09Hv/i4NFvvqy5a+PEHT/BMAsO3rHMh4XVL8lTdgXFA:WRzM7I1vk+PEHlMAsO3rHE4VolTdgVA
- TLSH T184D58D0B6CE409EAC4AA533189B651917B70BC594F3227D72E90B7783F72BE1AD36740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1948 file.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1948 file.exe 1948 file.exe 1948 file.exe 1948 file.exe 1948 file.exe 1948 file.exe