bcba0c5389a73d544007bd3f76d365268a973a4b66437d322e1160aaa2dca089

Analysis

max time kernel
899s
max time network
896s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 04:33

Target
feather.exe
Size 5.2MB
Sample260801-e6y1qsxgmc
SHA256 bcba0c5389a73d544007bd3f76d365268a973a4b66437d322e1160aaa2dca089
MD5 bdd2845810cdf731b40ad341224a503e
SHA1 567510ad1dc6e112a6f9841908ecbd048ca2fce9
SHA512 4eea454a8d263fc30c0b030915322b852daa23b832829673eaa37a79b3fc2a837775811af21db874448e7a5108cfd65b7c2c72f7b528d28fe0c8d82d3ac304ad
SSDEEP 98304:1o4D4QSVseOWcAkp64VWgN6ChuNEWn8KnNUz1Gp6eGfCLpPGkLB8:1prSV3cXrW8KNJpvL9
TLSH
T1E6468926A6346ACCAA5AB5FCFF0314B3D712F38106CB936593F1F04AB8C3B5D9998511
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2564	Feather_Runtime.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4376 wrote to memory of 2564	4376	feather.exe	89

C:\Users\Admin\AppData\Local\Temp\feather.exe
"C:\Users\Admin\AppData\Local\Temp\feather.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4376
- C:\Users\Admin\AppData\Local\Temp\Feather_Runtime.exe
  "C:\Users\Admin\AppData\Local\Temp\Feather_Runtime.exe"
  2⤵
  - Executes dropped EXE
  PID:2564

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3024

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4724

Feather_Runtime.exe

Path C:\Users\Admin\AppData\Local\Temp\Feather_Runtime.exe
Size 5.0MB
SHA256 6680046eb5082be3a6d40743fe5e9a624e796e5793f1e62e5f1ed03948d5163f
MD5 d67dd3791e2713bc0f3c7c7ebecfdf98
SHA1 a98b94169cbef967d2d280df633710c23ac0b27b
SHA512 39f712642e6fd5c0ac28d53f2d7d717a3542487390d339c8928cdd79767a0ac1f036501004959b52325401d0f8823a3162554df50448cdb3dda7ba3ac3726d12
SSDEEP 98304:DcP4ooqmcJZo/Y7mgTm05AwJHE6hoXOlZqL9PlF:dozZJmg7PAmkT+ZqL1lF
TLSH
T1F236BE42B3A1C5E9C166C138CA46D7A7D7323C090F2156EB329C7A1A7F736E04E7AB51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download