Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/08/2026, 03:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe
- Size 83.5MB
- Sample260818-d7d7aadn9s
- SHA256 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2
- MD5 6afc5b0c21b6b6a3db953d6ccf4692df
- SHA1 1f1b89573467230d59454f107fe825c6f87ad4cf
- SHA512 03cd5e39a32683a7ce760d0bc35961328db4f177cbec64138cf27f64d79af14ae3ab2cf15a1a3abc2d71ace1b1d8868f62781fe18666c9e91904de6e4368c1c6
- SSDEEP 1572864:SLF7mTNL2FUIi0vL/cz2BGQ/gO8zq8pAnvyD8MEk3RetZMMzWBNgvQEVy:M6xsvL/czCLgO81AFKRetT8g4E0
- TLSH T16E183303BC8552A5D6AA9239C9A68252B761BC448B3037D33F84E7F42E33BD55F36790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1536 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1536 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe 1536 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe 1536 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe 1536 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe 1536 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe 1536 6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe"C:\Users\Admin\AppData\Local\Temp\6f9bd8f7ed2d35d9dce20cb01fa0d7094d7b90c12986d3b7d64db0b6d4fc18e2.bin.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:1536