6fae643a357bed6253181ab12ea688dbf09d251e745c3783eb957224e93075e1

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 19:11

Target
VO.exe
Size 28.4MB
Sample260723-xvyvpsvgmb
SHA256 6fae643a357bed6253181ab12ea688dbf09d251e745c3783eb957224e93075e1
MD5 1897e1ee1f37cfa0aa45e4cfe2e17435
SHA1 3bda9e7f741487fade47172515bf430539cdadca
SHA512 a17b43ca0b8b7955650218fc8e9eee53d161e9238c65631fb43d4c399b971d118d236d4f1906d57f9d611c896298543e9cc38adf8b67c2a1899dc9bd042f4b65
SSDEEP 786432:HGqMVu4InxBS3pVWM1PPkh745DcV2kDA2xO:HGTu4yBS5VWMNj5DyO
TLSH
T1996722C669E981ACC8468534D6869BFEE0C67C898E79841FBFCB6C033031D55CDD663A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4588	VO.exe
4588	VO.exe

C:\Users\Admin\AppData\Local\Temp\VO.exe
"C:\Users\Admin\AppData\Local\Temp\VO.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4588

memory/4588-0-0x00000001403C8000-0x00000001415DF000-memory.dmp

Download