Analysis
- user interaction
yes - max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/08/2026, 22:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Atom_Premium.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Atom_Premium.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target Atom_Premium.exe
- Size 22.9MB
- Sample260830-2n46cs1gkd
- SHA256 c7723cbfa2ab9726938151c8828a2fedcfeff8db5ded7fc15efc95bbd1c4a8a9
- MD5 bdf0fe14387bc1502c8f5ae20e82ae5a
- SHA1 a0c40b1c2b5ae139f79ace0c8d49ce94a71954cb
- SHA512 9e9dc2e66f0591ccc967bc24c78400f0fc26c2577204743c0c4daff3da8be23266a5a123a76b44548b5f26b3d8628cdc0034a698371842f6b71906dedc8c0cb4
- SSDEEP 393216:MOayTe9yPhQtJ+rachAzwzkpF04QG2KmVCNUdmIubcfUx2pixGYuOlpvPUKCRLI:8uGPBgpIceYyUHuk3pixGYP5P0RL
- TLSH T1633733FE61597368C06688348C33F965E2B18C0D86EC95BB72CBBF817F63920D942756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4352 Atom_Premium.exe - Enumerates system info in registry 2 TTPs 5 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct Atom_Premium.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer Atom_Premium.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Atom_Premium.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer Atom_Premium.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName Atom_Premium.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4352 Atom_Premium.exe 4352 Atom_Premium.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4352 Atom_Premium.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4352 Atom_Premium.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Atom_Premium.exe"C:\Users\Admin\AppData\Local\Temp\Atom_Premium.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4352