db13f76d9d3542294dab5c150ded37b6424c95dcca4c0b24796d4e982b7fb973

Resubmissions

10/08/2026, 10:25

10/08/2026, 09:08

user interaction
yes
max time kernel
153s
max time network
234s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 09:08

Target
SIGNALIS/SIGNALIS.exe
Size 638KB
Sample260810-k34ppsfb54
SHA256 db13f76d9d3542294dab5c150ded37b6424c95dcca4c0b24796d4e982b7fb973
MD5 0823d132912746bebc039dcd604a3b43
SHA1 e5b7915328d6942a09c3b737c1023d5a9a11ad2a
SHA512 be9bcd99312c32c839e7bcc41d27f2b7ce0824b9b9b6342603e6cefdee091941689f9d9edeb8c5c92561eaa9bd3569ca3865c1631699b398ccfd8d3e21cb9cfb
SSDEEP 1536:TCL9gXAX271lcBzqEY2lkCsJVxYDXosWkd09dl3aPGMCjkOqxHQSBBBBBBBBzu+6:UgXpJozm2lkCspYDbM5qxHQvVBFUs
TLSH
T186D4157D523858A9EC7601FD0A24A6B02685FFF1448E589BE0B43D2379BD26C5F7A334
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3632	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3632	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3968	SIGNALIS.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3968 wrote to memory of 4952	3968	SIGNALIS.exe	88

C:\Users\Admin\AppData\Local\Temp\SIGNALIS\SIGNALIS.exe
"C:\Users\Admin\AppData\Local\Temp\SIGNALIS\SIGNALIS.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3968
- C:\Users\Admin\AppData\Local\Temp\SIGNALIS\UnityCrashHandler64.exe
  "C:\Users\Admin\AppData\Local\Temp\SIGNALIS\UnityCrashHandler64.exe" --attach 3968 2210889338880
  2⤵
  PID:4952

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004E8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3632