Analysis
- max time kernel
150s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 17:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target file.exe
- Size 3.5MB
- Sample260731-wasmhseb63
- SHA256 361bb9d7af27899814865ea2167d8919efb69c389f0e23e23fb419e71bacb2fa
- MD5 3e784773cb620de344893da57b4a79f2
- SHA1 5bab1b2757b462cc0013e59eea1f0a47956a8f45
- SHA512 b42ce5d90737fca3d7fe16f12a656edea4ef28ab2e19319a354d756d49f91019a42ef7d6a2d5087bcb2ba7decfca94fb80864d2e59debf4ba13c35c63b546d71
- SSDEEP 49152:B6mwUJTbbkxhtUBsdFOkKqv+d/ATdRqZHR3TcflNcLC3iTXthYAP:BHvVrOE/IIESCs
- TLSH T16DF59D07BCE149F5C0A5A33189AB86567B35BC490B3627DB2E90B6B83F323C09D75B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4724 file.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4724 file.exe 4724 file.exe 4724 file.exe 4724 file.exe 4724 file.exe 4724 file.exe