Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 18:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AstralClient (2).exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
AstralClient (2).exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target AstralClient (2).exe
- Size 14.7MB
- Sample260808-xjf6hscl41
- SHA256 ed0cedf7e187ec5a0a43d5db0a6575273f75beedc283d985b8d84dd54e2a3f62
- MD5 0ec3d4980b4d850571cfeaf56bcbd2d6
- SHA1 0e811f892e1aaf76b2669ef47a93d7b5bc4c6bd6
- SHA512 8ecd81c8de7e980fe56d494371d92e6fa10b3742334b188b1797c482e473c444e61d88c6a26858d96c246ba99bad3af2bed1936c8b7bab8531ba2c94ebe9b224
- SSDEEP 393216:4m5GQllFK+fy7gAM7Yx00EAHEVUqmxRNMFq+vgZL:4m5GQly+fi3M7W3Rw3EabvgZL
- TLSH T1DDF612D919A5A1BDC4528034E14A17F6F0C57C898DBD0C2BBFC759012738CE7E49ABBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 5904 AstralClient (2).exe 5904 AstralClient (2).exe