61f02272c2f372891f28ee13c234505c87c6055eb8951381e49c3d57e6ffb021

Analysis

max time kernel
899s
max time network
427s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 03:03

Target
PigeonRBX 1.6.exe
Size 25.2MB
Sample260723-dkfftsff63
SHA256 61f02272c2f372891f28ee13c234505c87c6055eb8951381e49c3d57e6ffb021
MD5 30d1b145a3d9e50966a352a51eb9c7f4
SHA1 7af4b341abf2eaa83261c00f996cead4b8a0904e
SHA512 4713b756fd668626484c7b1855a52aea2cfe4bb6a8cf5dd15bbb6f2d03982468be3a9b8091bac5161dc0daf761f493b7117d32d0f3300b53bcbd1bec5ccf1a23
SSDEEP 393216:n4GeUEJypIaqmqA/ZUONuixVIlK6i40BqAw5f+hASWjxBPE8kt1:4GNEJyWaBqA/ZUMBxVOKf4CEmByXPc1
TLSH
T1644712D978E091ECC892C534D6892BFDE0E9748D4E79982FBFC718012A31D96CCB5936
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
5384	PigeonRBX 1.6.exe
5384	PigeonRBX 1.6.exe

C:\Users\Admin\AppData\Local\Temp\PigeonRBX 1.6.exe
"C:\Users\Admin\AppData\Local\Temp\PigeonRBX 1.6.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:5384

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1656

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2964

memory/5384-0-0x000000014011A000-0x00000001410EC000-memory.dmp

Download