Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/08/2026, 22:43
Behavioral task
behavioral1
Sample
ntoskrnl.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ntoskrnl.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target ntoskrnl.exe
- Size 23.3MB
- Sample260802-2naazstala
- SHA256 2e7a8854b8940e59b3c5274a5505b15049de0c837edb37a96ce3ec1b1ab3a960
- MD5 ee3acd10e24e1530a13727f53f2894be
- SHA1 398781bd99d6ec18004e3637e8a1f3e87d5d3585
- SHA512 c42f9af180e24330cc2745f7869d59bc285eeb6a9ed1f74f0c845e465e09d50548ec75a39af1b900deec253ea3dadbc807c30d6ab73b51bc658da8644d11fd4a
- SSDEEP 393216:+pLaxQCqVGssiUN7wu/XbHlvfeVihBNav67AZIEWBQ6aDkPA:+BHZ0srU2u/dfec1x7yIEW66aDkPA
- TLSH T12837339B270C6B68D7849270392933B83E6297F51F9D940DE6DFECF246368188F25790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3428-0-0x0000000140000000-0x0000000143059000-memory.dmp themida