Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/08/2026, 18:24
Static task
static1
Behavioral task
behavioral1
Sample
bin/gh.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bin/gh.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target bin/gh.exe
- Size 39.8MB
- Sample260816-w15d1avbpg
- SHA256 e2efa10a5d2ce93cac9bc4b676932b62947c0967c01c8f2c3a9cb4437ad358d3
- MD5 f0cc29de676806eb691a7a13d36cdfe1
- SHA1 194f39e80434ff6ba05ee59448d40406ca864088
- SHA512 f0a0a0787ddca2742041126ffd5fbaa5aefc3fac319fa354d474bc8b3ca4daafe7db8fa8bcbfc8d501935bc059219116fea14a006ab4502b907ef3ff5bdc4a67
- SSDEEP 196608:W5poDJ2uwILLHE8NwIBvYorLOg4nkkAvD9nfakx3Fv9kFj:W7o9k8uZ5g4nLABniK9Mj
- TLSH T15D973943F8A50CE5D4ADC935C56286137F627CA9872423C77B58FA206F3ABD096BB350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5412 gh.exe 5412 gh.exe 5412 gh.exe 5412 gh.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5412 wrote to memory of 2904 5412 gh.exe 89