5ba4a632a901e082132fbac69aef37103a366d7970361fbf4586ceb0e2b4d900

Analysis

max time kernel
148s
max time network
99s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 04:48

Target
#67 -Loader.exe
Size 30KB
Sample260712-ffgjfacz2r
SHA256 5ba4a632a901e082132fbac69aef37103a366d7970361fbf4586ceb0e2b4d900
MD5 2365f88a8b157fecf2e1d1d93d4ab570
SHA1 1bde1cbf901c5a2788187bc72f84ff2075da3e13
SHA512 907cdc143f2099ad0cdcd40be860095cdd6f522ca539087fd9569945eaab83b93a2710e41329fa598ea425e0f81765c2461b7e56d6e244c6339f8cba3f8e10d7
SSDEEP 384:zbpQeexrF/ajttS8u3FSsl2sRB7h+6Beo/JzsFr8QtU04Vlv5oo5BBVjw2WYrAQ0:h8mq3N9eE4FrdtU7xvBBidY26LsFOP
TLSH
T103E23B56A7570CD8D1A282BCC4772A26E2B3789D0751DBDF03F081651FFB2D46536E42
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1544 wrote to memory of 3384	1544	#67 -Loader.exe	87

C:\Users\Admin\AppData\Local\Temp\#67 -Loader.exe
"C:\Users\Admin\AppData\Local\Temp\#67 -Loader.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1544
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:3384