Analysis
- user interaction
yes - max time kernel
50s - max time network
39s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/08/2026, 18:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
q3luidt5.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
q3luidt5.exe
Resource
win11-20260513-en
4 signatures
150 seconds
General
- Target q3luidt5.exe
- Size 3.1MB
- Sample260815-w6vrrasapb
- SHA256 5d40eeaec31b35ffcfa6504e4760c4e5da44fdbfe379b4b025f115a4839052f8
- MD5 0fac9f2c2079ebe69e4ff12a737359fb
- SHA1 6de37d5cee7be29ebc3bec51a73e857cf6f4e932
- SHA512 d7b6dcf3d70fd32bf8d7f32cd1e1e1ead3bec62eadf1a7ee7951b5ad0ec8e4bfdfb3afa6f1730b384970b75cf14ab5fc999e62c3fdad4d0341261ff1227a51d2
- SSDEEP 49152:VybAhCwicyoZBmEvxeqGOytDwhYn1cPK2Yb8URjvXrFDkeG93MQk3CwZRpXxSgAF:AUytrcATBkeG93MQkTsd
- TLSH T17CE50216B39082EDD1ABC579859A9F0BFB717809036057DF17E80EA52F976E01E3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
pid Process 1048 q3luidt5.exe 1048 q3luidt5.exe 1048 q3luidt5.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1048 q3luidt5.exe 1048 q3luidt5.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1048 q3luidt5.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1048 q3luidt5.exe