Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 12:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target file.exe
- Size 1.3MB
- Sample260831-ppm71sal3w
- SHA256 fc19b0895dd5de78965bfc950ef23e794c177dd95d430636a63d1a750333f62b
- MD5 77a6615c910d2900ba5a33b185abf381
- SHA1 f53959b4052d4624192e6959029c9d8b78c70ff5
- SHA512 e4807a058322ad68049184bb7cb231ab81ac86e475e0bc274e0f43708baa92b3fb200e7d2b97b4d18ca057dd31d28b64b919be6fde24165a0458578692f067b6
- SSDEEP 24576:OEu3dXp90hi6BProR9ZkkzAmFNA7YSMnaPYIT6mAMI:p8Xp90bToRNkMVITu
- TLSH T1C655B34AE72696EDD965CAB8D0736232E5767C0C803CBA27CFC60F502FD0760E565B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 3532 file.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\CLSID\{0D4FF97F-E3E6-456A-B018-3996F942CE0C} file.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3532 file.exe 3532 file.exe