Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 11:09
Behavioral task
behavioral1
Sample
brRDzVxmCizC.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
brRDzVxmCizC.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target brRDzVxmCizC.exe
- Size 27.5MB
- Sample260728-m85kasvemd
- SHA256 7787c5c1bf2597db0e1797bcdc9cc60e88f232fdd9ed7287213ceb138dc86bb1
- MD5 febf8145dd0200b896c213bb3cfe56bc
- SHA1 c4c151ac6371df6166b62d71aa9acea097de6290
- SHA512 496eeaaf5fff1fae3371ea323f130b6a02ac07738b2a0814a60575a8265117e078d520b1c547470edbd719b669cbd4c7954aac6f5fcc0ef8a70a61cc774c93c3
- SSDEEP 786432:Q2HLFqGS4kN6+kL4E2oA2kKxSbfG3BpJvB:Q2kGS4T+CmoAaSbmHJ
- TLSH T16D5712C669D482FDC751C539D2861BF9E1C938998EBA892FBFC644013570C85C8E7E3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4000 brRDzVxmCizC.exe 4000 brRDzVxmCizC.exe -
resource yara_rule behavioral2/memory/4000-1-0x0000000140000000-0x000000014333E000-memory.dmp upx