Analysis
- user interaction
yes - max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 12:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aW7qtLu42bHSYUp.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
aW7qtLu42bHSYUp.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target aW7qtLu42bHSYUp.exe
- Size 1.7MB
- Sample260905-pc6htsdf87
- SHA256 1ed996aca7564ab1d36ec2dd7716e4e57ba6bf050e57dbc0fc6b5c82636d1b01
- MD5 01bd7d8a789e434932a59c9a3fe17bb1
- SHA1 ea4128c4626b14413f531656aa5f2180e8d90a84
- SHA512 959d9adb9380fb9bdde9597b83add033467c0f7ee1051bc5bdf503cf2358921d07852a9e98e7121ba04a6c524abd1a05d1d32be73a8191f7622ca015d086fe76
- SSDEEP 49152:lq9mUPg5UTMXg5lQky/WqXwOArJdXe8xBW:A9mXCEg50XwhJdXe8m
- TLSH T16285F24399D80337E1A3D774C896228DF3A45F911B3DC7E7039B01626A766FC98B6362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4832 aW7qtLu42bHSYUp.exe 4832 aW7qtLu42bHSYUp.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4832 aW7qtLu42bHSYUp.exe 4832 aW7qtLu42bHSYUp.exe