9034c169aa2b17cca69a47d41e0b2f00406bd9ffb7ebd355f14f36334de8d63d

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 09:12

Target
loader.vmp.exe
Size 25.5MB
Sample260822-k56bbaef68
SHA256 9034c169aa2b17cca69a47d41e0b2f00406bd9ffb7ebd355f14f36334de8d63d
MD5 cb34452a97bfc386971ab71793c7a365
SHA1 b433100003a2d36def3e6493aa783a9aa8c343c1
SHA512 d1dc4fbd4b23f02f0906acce4c984eeb3bd81b90bf18505881cb61ef9b92850bd38bbf0d849fd91880979fc24e7f33d40e1f614247e9bf78bbafb990d808ed69
SSDEEP 393216:Bz32WSteb6F/SGdUBPVvU/51sOcXSsvUypCtb6xg/8/yC94N5heU:pEwbSaye181/3mK6SUaC9yhT
TLSH
T1FD4723D269D692E4E3D34F08D2CB13879390B2D9D596861E35C6AC032931EA78F46D3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4840	loader.vmp.exe
4840	loader.vmp.exe

C:\Users\Admin\AppData\Local\Temp\loader.vmp.exe
"C:\Users\Admin\AppData\Local\Temp\loader.vmp.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4840