Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 02:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sephiria-vrc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
sephiria-vrc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target sephiria-vrc.exe
- Size 19.9MB
- Sample260831-c7xsyswvhs
- SHA256 6d3a0561821cebc506724f1af88336bba775ca19cf1026fce59286df5264f7c0
- MD5 ec01aaa1f27a120208772c690cee74e6
- SHA1 63562b1b226bc8dcb7258006b3926ca8084aff87
- SHA512 0d4a38bd3c31a40ab4b0f3c389c484360d437c990055abfda61c3d04a20b48f9e5fdced60df2e4a4b9ebd00c229083996919abe9ad52611a4716dbaf1f728f8c
- SSDEEP 393216:RVuStBti52eVDVFwb0farevbGh7gabFtGhf8+8/xS3l1jikqLD:3uSJQNrwbPrevbG9d8hE+84VNik4
- TLSH T1152723DB49D993FDE3834748764B12CB52C0245BE9EE892C3ACB64017271D5B828BE77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 5312 sephiria-vrc.exe 5312 sephiria-vrc.exe - Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FD3BC942-E1C9-49F6-935C-12F5BF01EEB1} sephiria-vrc.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FD3BC942-E1C9-49F6-935C-12F5BF01EEB1}\CacheId = 723839464356566b713559697245384c5a394b594662575764504c5265595066654f596245615034393900 sephiria-vrc.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5312 sephiria-vrc.exe 5312 sephiria-vrc.exe