Analysis
- user interaction
yes - max time kernel
149s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/07/2026, 15:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loaderhypersense.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loaderhypersense.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target Loaderhypersense.exe
- Size 1.3MB
- Sample260718-sdenaahv4w
- SHA256 3e3af4b93a0e3d32527de2e21f6996f6b6f4565ad2153001b759c3456df3f6d2
- MD5 3f070499b062d7a3c07f3cc74356f01b
- SHA1 6051274b115740d78ce7674e2eb755ad243cdff3
- SHA512 cef58c320c40ebc3b9185364973b018d9fabdc9422615ba7b0846aaab8ce9a1f7cb76170ded0ebdda2e88b443c4e0586ebdb5ea92997e8f043cc294c794a8d6c
- SSDEEP 24576:Q+uigFZWW/m++b21mS7uuCR8CQETbVnQuzATDmjfef92Dd8QFDPYisnt:XgFIy1B7jkQETBnQE+KjO92DdvFLFsn
- TLSH T140550247F2B640E5C07BE234D592AA0FEF773444072059D763E499A82FE36E067BA712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe 5824 Loaderhypersense.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5824 Loaderhypersense.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5824 Loaderhypersense.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Loaderhypersense.exe"C:\Users\Admin\AppData\Local\Temp\Loaderhypersense.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5824