fcb465360b72e5d4424bd480023d79920b270da887994ed09c89717b5b85a45c

Analysis

max time kernel
150s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 03:19

Target
fcb465360b72e5d4424bd480023d79920b270da887994ed09c89717b5b85a45c.exe
Size 14.7MB
Sample260807-dvm9eswfrb
SHA256 fcb465360b72e5d4424bd480023d79920b270da887994ed09c89717b5b85a45c
MD5 01eaaa7d7b17769b54f73e2261a21e04
SHA1 851d4b3c9acfbd58df859587ca4dd0bad8b0a4fb
SHA512 322394a774a112a8e6739adaf75b9365bb59cf25582493996459aa007b32cd47f05e71ba9334c78e765e2406cc2fa85adbd6b6a10eab4338af9d25079615c246
SSDEEP 196608:JLU/NtggCGjZs2xMhUQF8elg54T4zssJAPxJaGB43aAuu/pUrDCe:REox2imQF7MJAPjaMcaAhRE
TLSH
T1F0F612E56AD1927DC481C538E24A56F9F0C9BC8D4CBC542BBFC77902A235C95C8BAB31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4828	fcb465360b72e5d4424bd480023d79920b270da887994ed09c89717b5b85a45c.exe
4828	fcb465360b72e5d4424bd480023d79920b270da887994ed09c89717b5b85a45c.exe

C:\Users\Admin\AppData\Local\Temp\fcb465360b72e5d4424bd480023d79920b270da887994ed09c89717b5b85a45c.exe
"C:\Users\Admin\AppData\Local\Temp\fcb465360b72e5d4424bd480023d79920b270da887994ed09c89717b5b85a45c.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4828

memory/4828-0-0x00007FF778151000-0x00007FF778AF9000-memory.dmp

Download