95e854032c6ee11665a312ca147030e2522df8959790ff9f2d43242d461a9268

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 21:50

Target
Trevor4_dNWR.exe
Size 1.2MB
Sample260905-1qbfdstbqa
SHA256 95e854032c6ee11665a312ca147030e2522df8959790ff9f2d43242d461a9268
MD5 31ee7172d55fc28a54729291380e82ca
SHA1 b330341a104ea416a2e2dc9bc45f181c7401ef4c
SHA512 dbc404a4d3a4ffa64a3e71161a78d642f7d8b72567ba85e9d34c6916f54afcf9290c8d53e75e65720ec048e1b6dff86005982d9eab891514863aa296ddb242b9
SSDEEP 24576:QENoEANRtTbPCL3k38kHkMlQYWs3N2Yux/mvPycmWpru0pOjE:JNoEANRtXKzmeMljWs3N2Jxo6cVdu5Q
TLSH
T148552BCDBCD4EA4CC02482BF76CACFD89E522869CB68CD4D12FC959FF49660C6826157
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
964	Trevor4_dNWR.exe

C:\Users\Admin\AppData\Local\Temp\Trevor4_dNWR.exe
"C:\Users\Admin\AppData\Local\Temp\Trevor4_dNWR.exe"
1⤵
- Suspicious behavior: RenamesItself
PID:964