Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/07/2026, 12:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
35f0ab0f915749dcb9cfe10a4dc79cb1.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
35f0ab0f915749dcb9cfe10a4dc79cb1.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 35f0ab0f915749dcb9cfe10a4dc79cb1.exe
- Size 3.5MB
- Sample260727-ppaxpascjc
- SHA256 a4ae3e169d6cbd6ee2278e84948854cd1624719618f979199dc8a05a8540cf4b
- MD5 efaa9b6d9b1fc070288900187e80793e
- SHA1 3dda08864514b89730902e7891d38383320dcb6f
- SHA512 4e14c3323c3817b86ab6bcca2e63a2356e68f6a7891b6b41d2104acc6cfbcf48e1e901163a1bf0940b4badb6c2f1d649fc72e57a7539d712512e62616d51ee39
- SSDEEP 49152:M6o7q1EFNwpQ5YhO1sXawRGH+k/IB0POX2tJZViIJIcq:MjjYWs+BIuPZX8
- TLSH T18EF58C03FCA148F6C0A9A23189B652467775BC491B3623E72EA0BB783F727D09D76705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4328 35f0ab0f915749dcb9cfe10a4dc79cb1.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4328 35f0ab0f915749dcb9cfe10a4dc79cb1.exe 4328 35f0ab0f915749dcb9cfe10a4dc79cb1.exe 4328 35f0ab0f915749dcb9cfe10a4dc79cb1.exe 4328 35f0ab0f915749dcb9cfe10a4dc79cb1.exe 4328 35f0ab0f915749dcb9cfe10a4dc79cb1.exe 4328 35f0ab0f915749dcb9cfe10a4dc79cb1.exe