Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/07/2026, 12:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0c086e9dec2646afaae25a4d6d279141.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0c086e9dec2646afaae25a4d6d279141.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 0c086e9dec2646afaae25a4d6d279141.exe
- Size 3.1MB
- Sample260718-pg3bzaew7x
- SHA256 4992cb5f29594ae1cea78e028a2e6a51d571a610ceeb4442b605953b916dd1c4
- MD5 c16e60c672f817faa5287e9cd585aae9
- SHA1 b8293f75702d6f27eb4f69ec2564ce064d6a0068
- SHA512 dba8bb732b8142b7fea0289332e2fc965dc6884e74407aed980f49e7ff9cc52b26a28aace577d85fd8f733c8ee356bb001dbe01f3516973aeeaddfeb979a2349
- SSDEEP 49152:80M59Hu74mqIqSEbEZobDqMJX/5YQGuihD4Pvy7e:802QqSEYZuDRJX/SpuuCvyy
- TLSH T15DE59C07BD9119EBC09AA33298B61296BB71BC094F3277D32E9077382E727D09D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1104 0c086e9dec2646afaae25a4d6d279141.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1104 0c086e9dec2646afaae25a4d6d279141.exe 1104 0c086e9dec2646afaae25a4d6d279141.exe 1104 0c086e9dec2646afaae25a4d6d279141.exe 1104 0c086e9dec2646afaae25a4d6d279141.exe 1104 0c086e9dec2646afaae25a4d6d279141.exe 1104 0c086e9dec2646afaae25a4d6d279141.exe