3f5bc754e3c5658ab4d328d83444144fb049e589621c31e404a176607ab58f69

Analysis

max time kernel
149s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 18:12

Target
Long Thân Kỷ Nguyên.exe
Size 651KB
Sample260820-wtmklsfa79
SHA256 3f5bc754e3c5658ab4d328d83444144fb049e589621c31e404a176607ab58f69
MD5 67242cfbc71bcd7b6e02ee4b2848f39c
SHA1 0f2a8c293695cdd52408900c23b3d52d0f9b80ee
SHA512 8e4fa6e616760175d409116805f3fda2ef2a8b75e0134282ff83f472764f0370654386f27e2afd00c4ff255d1b5ad5cfe7d4721ea765819a6d95df6932c9e617
SSDEEP 12288:5/7g4aOD8g7EvGAHOWBBBa2ONelhqAQw3r+rJoour/q3aI/:hFaOrIv9OOTa2nHqAQw3rJF/I/
TLSH
T1CAE49D17B313AE96C042653B4411BBA747A45AD22A1EDB379131FFE37E436468F813E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	5608	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5608	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5384	Long Thân Kỷ Nguyên.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5384 wrote to memory of 2364	5384	Long Thân Kỷ Nguyên.exe	89

C:\Users\Admin\AppData\Local\Temp\Long Thân Kỷ Nguyên.exe
"C:\Users\Admin\AppData\Local\Temp\Long Thân Kỷ Nguyên.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5384
- C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe
  "C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe" --attach 5384 3089436381184
  2⤵
  PID:2364

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004CC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5608