General
- Target Falcon's MultiTool_packed.vmp.exe
- Size 28.4MB
- Sample260730-ntdnpswgqg
- SHA256 db3792361a2c149a01da1505c823af95ae7766f0dc86b8b32ff99f89bd60a4eb
- MD5 95265d7f87ed9a8d536b29d09c34979a
- SHA1 ff21b4affce54575f8d1d1884f215323456c9393
- SHA512 9f3b649c0e91d8b0ae0b6b1e5e297f8c7d2704745288595e91a9067a011f253de5504fc529aecda13bc60a4d02e1c59a9b68ce41b18125f2c59452b1d9509ec8
- SSDEEP 393216:0eVMPqtcLOEdkRfepQFuupP7LdZYuMX+5Nj3kzaApY24rZK8ySvGRN5dyVGQ1:0eVMPqy1dkA81RYuJ5Nv2YlZvC7bQ
- TLSH T1B367128938E191DCCB428534D38959F9E2CA7C8D8EBA452BBFC679016930C96CCF5D36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Falcon's MultiTool_packed.vmp.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target Falcon's MultiTool_packed.vmp.exe
- Size 28.4MB
- SHA256 db3792361a2c149a01da1505c823af95ae7766f0dc86b8b32ff99f89bd60a4eb
- MD5 95265d7f87ed9a8d536b29d09c34979a
- SHA1 ff21b4affce54575f8d1d1884f215323456c9393
- SHA512 9f3b649c0e91d8b0ae0b6b1e5e297f8c7d2704745288595e91a9067a011f253de5504fc529aecda13bc60a4d02e1c59a9b68ce41b18125f2c59452b1d9509ec8
- SSDEEP 393216:0eVMPqtcLOEdkRfepQFuupP7LdZYuMX+5Nj3kzaApY24rZK8ySvGRN5dyVGQ1:0eVMPqy1dkA81RYuJ5Nv2YlZvC7bQ
- TLSH T1B367128938E191DCCB428534D38959F9E2CA7C8D8EBA452BBFC679016930C96CCF5D36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger