Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 17:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe
- Size 80.7MB
- Sample260820-vzh9pseg63
- SHA256 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae
- MD5 b302baa68f41cfcfed30eaff14569b5e
- SHA1 fd32f3903aa08557b57d8fa98587afe50f598bac
- SHA512 eb16b1b1402edf4aceb3e021ecf6331a94eea79116b5ede83dbb727e4a1a8de0246527ccd1f1750148e96e29d54460a8b3a004d8f734c689ee3134d0543f32d0
- SSDEEP 1572864:lKBJo8wH7318sFynciTsGBuGy3Mwwx0xW3NZhraFievMK6lAA9D6kx7z59KArK:lIo8gb11i3TsG23oxoWNXev+ltD15z5E
- TLSH T1160833166CD449EAD4A9533388B7A1A4BBB9F8490FB513CB2D8272782F777D84C74384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 5348 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 5348 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe 5348 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe 5348 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe 5348 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe 5348 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe 5348 9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe"C:\Users\Admin\AppData\Local\Temp\9665aa59833a4603900108e50de6ad9d8d471d95d11ec5f1d3b233305a06d1ae.bin.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:5348