798a5d70323071ae1aba16a6f0da7af64cdbf6a4c726b74483aac1460a03c653

Analysis

max time kernel
150s
max time network
163s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/09/2026, 07:28

Target
loader.exe
Size 77.6MB
Sample260909-ja322atdqa
SHA256 798a5d70323071ae1aba16a6f0da7af64cdbf6a4c726b74483aac1460a03c653
MD5 ac05a882fe240acc42555fe8bd580516
SHA1 305c67ea6220249aa7807ef8fa069eb9d09785c5
SHA512 e47e60c4c8197a157f81ad9dcdccbf21ac1b45655776650827e25cf81aec9ee8433bac6eb0ed74a3dc5fa5f1432a3a7c513b74ce26d52fc2a8961e1530213928
SSDEEP 1572864:UftpCaGWBfZ0gwP5hcAZgT36lK7mspsNNupxpGT5QOBps/L:UftpCaGWT0zhpGe0JrUm8s/L
TLSH
T1BA08235699D562E8C0C31504A28F32CF56C0617EC5EEB9292BC76C03F530DA7998EEB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
5320	loader.exe
5320	loader.exe

C:\Users\Admin\AppData\Local\Temp\loader.exe
"C:\Users\Admin\AppData\Local\Temp\loader.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:5320