Analysis
- max time kernel
10s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/07/2026, 18:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nogibogi.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
nogibogi.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target nogibogi.exe
- Size 2.3MB
- Sample260711-w44xmsg15q
- SHA256 7a46c33d41609ed3458cae444499ef9a570d9da8f8c08f51e921b26d2323016e
- MD5 e96006549368ff5f7e9b1fb9e094e625
- SHA1 0973eae5a0fd9a444f4c9310d7eb5d8087fa71f0
- SHA512 dc44077c87fabaf57b097c00d29554bedc15528866d6ce1bd212694e1ab427efd61556a5124d69bbb23b6f86a143b8801aab3d8c5d44e8c10b8c3cb897131e80
- SSDEEP 49152:i84r3Vi11SIARhlO10K7Ze3DsNLNSq62VFrsA5tKh6:gw11SIARhi0K7ssNLrIas
- TLSH T16DB5120AEA6B4DF8C5F6D4BC8522693AF571B496837093E763C04A470F52BE8E63D740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
pid Process 1600 nogibogi.exe 1600 nogibogi.exe 1600 nogibogi.exe 1600 nogibogi.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1600 nogibogi.exe 1600 nogibogi.exe