Analysis
- user interaction
yes - max time kernel
187s - max time network
182s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/08/2026, 18:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
btg.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
btg.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
300 seconds
General
- Target btg.exe
- Size 574KB
- Sample260807-w8l8dsar5x
- SHA256 5097846f625071e53f73d213b06100a233de1cb7b3da57c742eaff5a82194102
- MD5 b07ad2d719bf6eb3f9f257cf15986b03
- SHA1 33f5d174820215080e145888c90d35a1550bab49
- SHA512 463fbd2bce3a2a946a4512f17bb5edc4ec4813ed3e7ce499c87b962f1585b8cdc9edbc32ae6706a01f5713dcb6c27bb88771c7803d048b5635a3fc378e11d250
- SSDEEP 12288:nRiq89ExguRIFJnJVg2v0qQ/zQR+uf3nfgD:RR8YzgnRv/QS+uPnf
- TLSH T133C4AE5AE3E0006AD067C134C5ABDA22F97B3844D7685EDF3398AD941F636D06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 760 btg.exe 760 btg.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe 760 btg.exe