Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 20:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CCS-Free.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
CCS-Free.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target CCS-Free.exe
- Size 27.9MB
- Sample260812-zbbbeavaje
- SHA256 d0fe78f8db7d1d3bc8ee718ab81703be66bf38ba64d624e323df0b11cc758645
- MD5 f86d1334df7ee13f1c32e04af4a44096
- SHA1 86e2cde5fec5a999744b690848c3fcf52a736853
- SHA512 3b47e7a01b2a1f998a39cf7195c1ec115a304df569aa7cd27a2f6e82a39c62641d45a75a20b57230f41fa0e437be050ae835ea7b79b2845984c19fc0ef5db1ac
- SSDEEP 786432:iLme6D3ZhjckiWcf62aj6g0E6spwQ0Y1ss9aoD:heOZJckiWcyR9fpwZYS6d
- TLSH T11E572357B5D6A3E4DB834AB0664612CB33C1656F82DE942C33CE78023531DA74A8AF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 3996 CCS-Free.exe 3996 CCS-Free.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe 3996 CCS-Free.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3996 CCS-Free.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3996 CCS-Free.exe