General
- Target winver.exe
- Size 1.8MB
- Sample260821-3wsb7stwat
- SHA256 8a10d343406a10899c7800f8eaef6c82d8fee9599a876f0621f64aa59f7fd918
- MD5 0dbb38f675a9c51a4d333775566c7642
- SHA1 ed2646ea38e6408deb3521bf2179011362306099
- SHA512 38fb1e4cd7254b62cf9867efb4422816fbd23dab8ab0f83327bf838dbb3fdad574b02e0fe55cb396be78c6532a6a238c01ba8531d7896fde6f9271ac83d46d35
- SSDEEP 49152:3mUd4Yu0n9x1wemjHeyP8V1vhNvREc1q9Lpr:3mpYffjMHWtEEq9
- TLSH T12485BF72B3920264E06AC1B9DA56E793F6713845077157CFEBC48A826B671F00AB73C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
winver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target winver.exe
- Size 1.8MB
- SHA256 8a10d343406a10899c7800f8eaef6c82d8fee9599a876f0621f64aa59f7fd918
- MD5 0dbb38f675a9c51a4d333775566c7642
- SHA1 ed2646ea38e6408deb3521bf2179011362306099
- SHA512 38fb1e4cd7254b62cf9867efb4422816fbd23dab8ab0f83327bf838dbb3fdad574b02e0fe55cb396be78c6532a6a238c01ba8531d7896fde6f9271ac83d46d35
- SSDEEP 49152:3mUd4Yu0n9x1wemjHeyP8V1vhNvREc1q9Lpr:3mpYffjMHWtEEq9
- TLSH T12485BF72B3920264E06AC1B9DA56E793F6713845077157CFEBC48A826B671F00AB73C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger