Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 01:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe
- Size 12.9MB
- Sample260730-brdjpsaa28
- SHA256 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b
- MD5 5e1be0ec5ed6abd45d74b48ecbfb63a9
- SHA1 1d481b1daa18f6bc1e45e6e6f1f9c1ec4ac06ee5
- SHA512 ee059e37d075dda4bd0bbaa4a2ddd3852c1c5d6d9893c1e3cf0c5eee3b90ba30c306edd43a72b8ee108eb503e24c268f6e0b683da41d2511a8c902a831f123d4
- SSDEEP 196608:V1u/8knYzgSWO+lW8hO1PpjVOv//1aMU/e4x4j8lJy3H8gaU+mvN7qTtP6uI:VoxYzgSWO6OBpjVOY5ViaU+sN7qTty
- TLSH T1E6D623C424C093BDC8819639E64526F9F0C57C9D8CF4D41AEFC389327A31E79D8A66A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe - Suspicious behavior: EnumeratesProcesses 24 IoCs
pid Process 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1076 1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe"C:\Users\Admin\AppData\Local\Temp\1a6d955eb76a8cccbdfdf4e9eb6a5ab1835ed0b7e5db73a36024550aa7d73c4b.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1076