b47a595f536e27ee9a4f112e4812fd3e1da960f930527b34e366d1ae755c5bfb

Analysis

user interaction
yes
max time kernel
30s
max time network
30s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 17:37

Target
[email protected]
Size 40.1MB
Sample260910-v7e71swsav
SHA256 b47a595f536e27ee9a4f112e4812fd3e1da960f930527b34e366d1ae755c5bfb
MD5 07644b8bf719352191b8e77c213f1923
SHA1 c009adf34883b86cb33686c067ed2e88b40d6c8c
SHA512 bd231de12a75ad60e15f73e97089ce59da87366f6ff4bc1918059da466eec39dffbe49b43ba46599d2eddfe9b3b8389dac40314e8de53607d9a6ba8cf046340c
SSDEEP 786432:hZKWKwL8WQNthXTJYIrf47exN0cDMOovduyDP9sSaBHo:OwbQpXTJYIj4gNZWdNP9sSado
TLSH
T1BF97F1D279D101ECC3A2C134D28A57EAE6A1748A0F7599DB3FC145122E32ED1CEB6E35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
6112	[email protected]
6112	[email protected]

C:\Users\Admin\AppData\Local\Temp\[email protected]
"C:\Users\Admin\AppData\Local\Temp\[email protected]"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:6112