Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 06:49
Behavioral task
behavioral1
Sample
1ee36fe4ffa29be8504b9d0f7d3e47f0.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ee36fe4ffa29be8504b9d0f7d3e47f0.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe
- Size 304KB
- Sample260811-hlkjdstyew
- SHA256 4af3cc00227c2a94b034b6297ec4ecb0c7ff145ba5ba2703692e99001290bb2c
- MD5 1ee36fe4ffa29be8504b9d0f7d3e47f0
- SHA1 27c68f35587e6ad0d8852b1078dee08c7c99aaf4
- SHA512 8dac419c97c73fb3888ff80c3fcecb441cbb3b10177949799567f1a24db7ed352f7e70bbe4ef51ffbb51cb168c8a5f62ead79042634ae3999fbc4e0c739ea779
- SSDEEP 6144:a/nyRFP6OUs9LNkewS6D1zqfD4DSXG8PF56XmljojWq1OZNwp+0:a8FiOxFcDcr4V8PF7lsjEbwp
- TLSH T1706422C56124219FD99128B0CB0645937E9C75837CBAD6A2A3DFF2C4E99C7C93E0162F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2556 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe -
resource yara_rule behavioral2/memory/2556-0-0x00007FF77FDF0000-0x00007FF77FFE2000-memory.dmp upx behavioral2/memory/2556-1-0x00007FF77FDF0000-0x00007FF77FFE2000-memory.dmp upx behavioral2/memory/2556-3-0x00007FF77FDF0000-0x00007FF77FFE2000-memory.dmp upx behavioral2/memory/2556-5-0x00007FF77FDF0000-0x00007FF77FFE2000-memory.dmp upx - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2556 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe 2556 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe 2556 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe 2556 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe 2556 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe 2556 1ee36fe4ffa29be8504b9d0f7d3e47f0.exe