97bbed17273704f3393374ebef5dc94de09d86db74265815bb5626a272b0bd27

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:32

Target
JtBocv.exe
Size 45.1MB
Sample260809-3jfgwaxdld
SHA256 97bbed17273704f3393374ebef5dc94de09d86db74265815bb5626a272b0bd27
MD5 503ba7b7fc7c396cc0cfc273d485a525
SHA1 8bbf8c424762bf57e0621de35d3d61af37bfbcf7
SHA512 bf2283a4de78d23f0034ac451665066b058cc16d09a5f4e1786e6d10a9f74d2e3cde54304132b80182d592f66e6e88dc5fe8793c04af49329103c1726bb8d7e4
SSDEEP 786432:s8WaKX4VtXSNgkm2vrP7yvpV6+pdB1923MP4h5rpKSg78Edrmg/Cr1KNV:4bstXoc2L7YVvdJ43gngEBmg/CrmV
TLSH
T147A723DA69D5D1ECC7818534E6491AF9F0C8788A4DBA982BBFC748017630C99CCF9D72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1492	JtBocv.exe
1492	JtBocv.exe

C:\Users\Admin\AppData\Local\Temp\JtBocv.exe
"C:\Users\Admin\AppData\Local\Temp\JtBocv.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1492

memory/1492-0-0x0000000140368000-0x0000000142576000-memory.dmp

Download