Analysis
- max time kernel
152s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-de - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows - submitted
23/08/2026, 15:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-de
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260709-de
2 signatures
150 seconds
General
- Target Setup.exe
- Size 783.0MB
- Sample260823-spp86aaf44
- SHA256 5de601e8b9a759fbcdbc2e3dd564a840ea326fecb9259f3894a41004d3c34a0b
- MD5 db54b99bc55f3accc9755331d2d8b49b
- SHA1 c88f1aed2a04c13a7302d4e2158b7ce3367beb1e
- SHA512 eaa9cc6aaf9662f86d6334bd5c79f174b72db36b9a2c7f6132dbfcfa978b62d84a40fc00c766915bb662991886580adcbcf1b89c0c0e3408b80df091e2bdaf83
- SSDEEP 49152:oE4q/I6LR0nmaPnCFPBzaaHyLxPhf1gO1HRdSrSPBjuAlyOBiF:qsI6LR0nmaPkHyPQO1xWOBblHC
- TLSH T105898D076D505179D4AA8B36813AC071A670BC98C73963DB2ED4EE733E657C31EB6B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1672 Setup.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1672 Setup.exe 1672 Setup.exe 1672 Setup.exe 1672 Setup.exe 1672 Setup.exe 1672 Setup.exe