ddb5345f2881b81ab1bdac09ad678ae4852fe129160670ab536213f54f53f79f

Analysis

max time kernel
150s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 14:05

Target
ddb5345f2881b81ab1bdac09ad678ae4852fe129160670ab536213f54f53f79f.exe
Size 15.6MB
Sample260802-rdvtts1sdx
SHA256 ddb5345f2881b81ab1bdac09ad678ae4852fe129160670ab536213f54f53f79f
MD5 5a66055f33d9f0f848c1ff7f920f39b3
SHA1 4ac745d23f1c298554d829f76771640b6a90dee2
SHA512 1bf237d9bead5309f9a5ad1bf4b6eb7c74098167ff3d32fc739919479b28837ff7723be5ac9a73b2afe14054529204e9f783cc497b596c2ab71c11d95506f623
SSDEEP 196608:iT+KOrIQypuZ5a5SghnoTMqbdJ6hjhnHyjfHkqRO0Jr9VBeel5FBU:E+Ko4uPgtopbdJAtgfHgcr3B9l5Fy
TLSH
T1D9F622D139D181ACC496D634E68A0BFAE0DA7D898DBA451F7FC779023630E02CCB6975
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1856	ddb5345f2881b81ab1bdac09ad678ae4852fe129160670ab536213f54f53f79f.exe
1856	ddb5345f2881b81ab1bdac09ad678ae4852fe129160670ab536213f54f53f79f.exe

C:\Users\Admin\AppData\Local\Temp\ddb5345f2881b81ab1bdac09ad678ae4852fe129160670ab536213f54f53f79f.exe
"C:\Users\Admin\AppData\Local\Temp\ddb5345f2881b81ab1bdac09ad678ae4852fe129160670ab536213f54f53f79f.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1856

memory/1856-0-0x00007FF670662000-0x00007FF6710F0000-memory.dmp

Download