7612e22e5bb72b2edf139deb141fb35325859dd845ec0d5392aeb0108ac5106e

Analysis

user interaction
yes
max time kernel
150s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 02:27

Target
preazy.cc lite.dll
Size 1.3MB
Sample260820-cxlypsybrf
SHA256 7612e22e5bb72b2edf139deb141fb35325859dd845ec0d5392aeb0108ac5106e
MD5 8740dbde68ab1ed22b06d37ce3eecf6d
SHA1 19fa3e3a3d8a313d067828b507a28568bfb0dd16
SHA512 802fedfe47d6d30fbcadfd1f7c447835f566c1b525389da515f3ae766cc359b86fa80e2a13fde08a95b4f640605a482a552c475ee3a920434ab0b62a472b774c
SSDEEP 24576:MrSIwpz+WgkSpaSksljcvFiInXS+bJtr+Qxn1mq9t+B0WN:lIwpzuajslcMIniSJtrBx1mq9tCRN
TLSH
T107559E4AB396036CD46A9D34C6B3D327B73278502B2592CFA3501998AFA72FC5E37741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2784	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\preazy.cc lite.dll",#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2784