Analysis
- user interaction
yes - max time kernel
150s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 04:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
backseat-loader-patched.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
backseat-loader-patched.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target backseat-loader-patched.exe
- Size 14.9MB
- Sample260811-e2rqvswbkb
- SHA256 986769f2959e53d32b47704a273fb57a76ca77f00f65d3bc9f69973a2346ac2a
- MD5 f94cfde74af5f9b2a7f11a6f55f12b1c
- SHA1 836446cadc452531711f7c8287aa5b13956b40e5
- SHA512 60b6f64b9c6d208f83a0b14a93d31762bcd51c58c4689e321b6d447917099e33b32ff7a6e1dc67989170b659620690033cda15901a089271d502ea672b54dc25
- SSDEEP 393216:zBbsrnloIBp+UjATGsDHQl4opVnUk8Qu3AADefzrBcteL4sXRp3em:zBe1BP4NQyopVnDu3NefzdUsBQm
- TLSH T12CF63369AFC572E8D4CB65785EC7259FB75830E643B059CF2A5C31CA2E63BC80B35206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 2952 backseat-loader-patched.exe - Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 2952 backseat-loader-patched.exe 2952 backseat-loader-patched.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\sv3FAF.tmp.dll
- Size 678KB
- SHA256 7c2bb1aa69097ace2cddac3661d9c01154510c27a8551997949625e8f0760d19
- MD5 9de6a951d82ed0ce71ef7487dd67b14e
- SHA1 5bfb3690c970319a3a5bc25ca780ad3ec418f206
- SHA512 e3be355c301c090261eb028858eafa176fd90c26dd08a3c4a61cfb14ea4fee8ca99838021541a8445b401cac9b404a84aeffa1bcfd9f5b4206a2ee9f4015dd77
- SSDEEP 12288:HWXiQzJ/NEt0+2X0NZtju5T+oq9hv/gQrUrRl0urmjJSJ4fEkpN4y2JcmkXAh:HWXtzJo9hv/gQrUrRl09dSJ4fzNNzXA
- TLSH T179E44C19A5E203ADF0A6F9B59AA29417F670780D0728A5DF07E05D982F667C0F737F02
- MD5 SHA1 SHA512 SSDEEP TLSH