9bccebc3e8a87a2f36ee478a1ffca49b9f62d99b507ba3979cbcf80edd6b92f8

Analysis

max time kernel
150s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/09/2026, 10:24

Target
file.exe
Size 4.9MB
Sample260901-mff18szyfw
SHA256 9bccebc3e8a87a2f36ee478a1ffca49b9f62d99b507ba3979cbcf80edd6b92f8
MD5 57cc33704c7c92b7deecb9c0e60cefb1
SHA1 bb6b175498c66d275da4ff69a3bb10f5cb04705e
SHA512 807e82fe5f9620cffc70491235cbe62bd6fa2fe8282ec4c8a035bd9e61b97de4d9c8fed4eba06fd35b58ff930bc8f07cbd8d4d229c12a6cbffdb47945dbd1b34
SSDEEP 98304:TGNUBxjeNWXE8Lvxx/dluc0ir/B8cvhgOa4q8HbPcqx6QzbNzfwy1K:g2QWU8LvflluN6Bn65ePtt/Nzf91K
TLSH
T179363302B76065F4F457C5349B448A45A63178E29F326AFF07F44A312F52AE29F38B39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4960 set thread context of 4680	4960	file.exe	88

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4960 wrote to memory of 4680	4960	file.exe	88
PID 4960 wrote to memory of 4680	4960	file.exe	88

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4960
- C:\Windows\System32\smartscreen.exe
  "C:\Windows\System32\smartscreen.exe"
  2⤵
  PID:4680

memory/4680-0-0x0000000140000000-0x000000014048F000-memory.dmp

Download