General
- Target Falcon's MultiTool Native.exe
- Size 17.3MB
- Sample260802-n83alsyzby
- SHA256 3d2f7905df1832d280625a5a7a80d332acf81d1e76b21c1d5c44f505179461e4
- MD5 aa417cd283b6cdc85ed24cafa1ac9d18
- SHA1 88cb36ee7209450c044a0f91600466e69d5e6633
- SHA512 1d5321d56e90204dd1a2e7ac73140eae1d6665c094532fc0f3d2dc0efe932a483eeab0dd60bcfc02ca47aaf7ffbf15432632be771f33b24cd84b5e01e6f24b21
- SSDEEP 196608:CyzT+KOrIQypuZ5a5SghnoTMqbdJ6hjhnHyjfHkqRO0Jr9VBeel5FBULZl:3+Ko4uPgtopbdJAtgfHgcr3B9l5FyL
- TLSH T1340712D13BD4826DC49EC734E1910AE9E2B2BD498EB6D70F3FC579412A32B41DC616B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Falcon's MultiTool Native.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Falcon's MultiTool Native.exe
- Size 17.3MB
- SHA256 3d2f7905df1832d280625a5a7a80d332acf81d1e76b21c1d5c44f505179461e4
- MD5 aa417cd283b6cdc85ed24cafa1ac9d18
- SHA1 88cb36ee7209450c044a0f91600466e69d5e6633
- SHA512 1d5321d56e90204dd1a2e7ac73140eae1d6665c094532fc0f3d2dc0efe932a483eeab0dd60bcfc02ca47aaf7ffbf15432632be771f33b24cd84b5e01e6f24b21
- SSDEEP 196608:CyzT+KOrIQypuZ5a5SghnoTMqbdJ6hjhnHyjfHkqRO0Jr9VBeel5FBULZl:3+Ko4uPgtopbdJAtgfHgcr3B9l5FyL
- TLSH T1340712D13BD4826DC49EC734E1910AE9E2B2BD498EB6D70F3FC579412A32B41DC616B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger