Analysis
- user interaction
yes - max time kernel
44s - max time network
35s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/08/2026, 22:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Debug.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Debug.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Debug.exe
- Size 3.5MB
- Sample260822-158dnszelf
- SHA256 4fc1932b7bf2f365683614e1ca961ff553eab2085e2f532bf0eb20d25c52a670
- MD5 4bd3354b1a0fce08b158791d792e7a4d
- SHA1 c77ee7bd3144ea93644a0743d5632254be21e19f
- SHA512 9099158e2d4daa339f6b8ca4336f8bdd062c8a152a1fe03421fa5f288567b1f6ea6bf7e35e313393d57c85672378ca5cb1037e7ef987f26aba4cc57e77aee2cc
- SSDEEP 98304:Zw1icAWpinQLTviuOh86GnjNUqvA8WU1gdGx+UmZC:SibWAn8Lhn2yvU
- TLSH T1B3F523B437D268B0C09FCFB0C65B71BE352EBB42AA618D1637AD26015F23215FA35365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1416 Debug.exe 1416 Debug.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1416 Debug.exe 1416 Debug.exe