d79e042dcec0b459e9941ac463f621ad02bf88e796e565edbfe834052d8797f2

Analysis

user interaction
yes
max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 12:32

Target
SBT.exe
Size 566KB
Sample260801-pq2rssy1ev
SHA256 d79e042dcec0b459e9941ac463f621ad02bf88e796e565edbfe834052d8797f2
MD5 aa9a8f11d5e3672e7d40e91561a15b3a
SHA1 4e7ee895c0456d31e790ba750a161098fcf78768
SHA512 a0d6a461e700fc6df021b9bdbfdb637a860c4895b6b6679537160a400b2f4f4f5002598282d190f42c8fdce976552a92f73d0602ed35c888fcf2b7b7e198e017
SSDEEP 12288:Rin1H22fwJeUKzmT2x3hetVzUJ229aYifnb9fLW:RGHX44zB2hO9ifnb8
TLSH
T15DC4B047B1F541F8C0ABC178DB86E61BEE763858072046DB23E449A92FA37E0577E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4364	SBT.exe

C:\Users\Admin\AppData\Local\Temp\SBT.exe
"C:\Users\Admin\AppData\Local\Temp\SBT.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4364

C:\Users\Admin\AppData\Local\Temp\WinDivert64.sys
C:\Users\Admin\AppData\Local\Temp\WinDivert64.sys
1⤵
PID:3568