f7d97abeb9d6dcfcd0044e34e45e966ac989f70800e00b8366af4a1284486b36

Analysis

user interaction
yes
max time kernel
150s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 05:00

Target
launcher.exe
Size 56.6MB
Sample260710-fm56daev9z
SHA256 f7d97abeb9d6dcfcd0044e34e45e966ac989f70800e00b8366af4a1284486b36
MD5 83bdb70f889e0543a38f2d51a4c1e424
SHA1 7aafe39cd17cf83a1306690014f3838f05a164f3
SHA512 173583fd2d514e05cd2716a38dcc3a0a4549788eefe219003b6ea28a60f47f3156cca22cc070fe78e44dec0a369574e15c84de20b3e44a9990e17b0325d0c10c
SSDEEP 1572864:GFE9rOMaWaWahWhnjuJ+elZPMlSAAo1C7aG:drO/W4ck+er0wAAog7aG
TLSH
T130D723DA69E1856CC882C135E2460AF9F4DDF88E8DBD542AFFC744013631C69C8FA976
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4440	launcher.exe
4440	launcher.exe

C:\Users\Admin\AppData\Local\Temp\launcher.exe
"C:\Users\Admin\AppData\Local\Temp\launcher.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4440

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4964