589ac1013ae37cf77033848c3313753e336c054728d8f1aa0984b57be4d397a1

Analysis

user interaction
yes
max time kernel
10s
max time network
13s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 15:09

Target
host.exe
Size 37.5MB
Sample260806-sjyncadr9v
SHA256 589ac1013ae37cf77033848c3313753e336c054728d8f1aa0984b57be4d397a1
MD5 b0f68525563628d8f44831a405f235c6
SHA1 11733464433dc7efc28401b884e0d10a2421b051
SHA512 72020ea0adae76df9121eecc3d11569dc20abcd6530a2d6cf2726baee900fe0bcbaea58bd508df5625d20f48717b3e45cf1d0be4ce6a53170aafb7ad929eba31
SSDEEP 786432:0KPfgLDIWJcEB4UsX4Mi5lQ2i07FRbdHSQqrERGh5z2SLRF4rU1:VHgpCUQ4Mi56sZvq4RIRerU1
TLSH
T1888733E368C071E4E0E74E02B24AA3BD61D26D16599B4C1D2AC23D436F31DF69B0ED97
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4256	host.exe
4256	host.exe

C:\Users\Admin\AppData\Local\Temp\host.exe
"C:\Users\Admin\AppData\Local\Temp\host.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4256