Analysis
- max time kernel
150s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 14:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe
- Size 6.2MB
- Sample260805-rdjfssbe26
- SHA256 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d
- MD5 bdcc2570f715c43231530f81634c6e70
- SHA1 bf0099937a019dcbc4a3e8e5b803e90b0e99bfd8
- SHA512 562d0d7d05834ae770498092bc616fd46fe23732b18d8587d218fbe0a8e744286ea60650882e6dc5f85cf0f437d8b665029771af217d215eaac79002624db3ea
- SSDEEP 49152:hZaDyp7y66n5bwDOH816TPbEt2JUs8Gb2:hNGJc16Km6
- TLSH T1F6669E07BCE149EAC499523185BB52A17B35FC190B3223D72E80B7382FB67D09D7AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2052 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2052 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe 2052 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe 2052 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe 2052 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe 2052 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe 2052 32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe"C:\Users\Admin\AppData\Local\Temp\32e1579eedeb079478165a94c221d3bb47dc383013fc7ac1ff7b435d8f08517d.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2052