Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/08/2026, 04:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
installer.vmp.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
installer.vmp.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target installer.vmp.exe
- Size 14.1MB
- Sample260820-e872esen5s
- SHA256 764880aac2c7e988671c86ba54ebe14d39ef2c59f2ce0200ecfee666812270ef
- MD5 35f1f714c67e1b20e9c08b92b27dfe40
- SHA1 8cc62f0a90c16435f3701c34805fa9f498cf8808
- SHA512 3a91d56e202b9b5b02cfc4f699d5f216b8f1aa669e5ca7dbae340e75e94db8618925431fc43395d910836a8f7f01fb1863b3fd0b5415c16be79bde6e3c291588
- SSDEEP 393216:tO2KRnQcalG3B4EcEz1YN/xAVWiKektOnFlBO:tLkbaAyEfzyAHKVYvB
- TLSH T10BE623EAF8C573F4C9D34A80A25B17CD71E1612A45AEA82837CB3D026931D5B474EE37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4812 installer.vmp.exe 4812 installer.vmp.exe