Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 17:09

General

  • Target
    02c9a3ae7a7b6e77444717840c29e403a27ec5e96afecfe6efbf51f0129773ac.bin.exe
  • Size 2.6MB
  • Sample260910-vn9bradh65
  • SHA256 02c9a3ae7a7b6e77444717840c29e403a27ec5e96afecfe6efbf51f0129773ac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\02c9a3ae7a7b6e77444717840c29e403a27ec5e96afecfe6efbf51f0129773ac.bin.exe
    "C:\Users\Admin\AppData\Local\Temp\02c9a3ae7a7b6e77444717840c29e403a27ec5e96afecfe6efbf51f0129773ac.bin.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:5020

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5020-0-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-1-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-2-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-3-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-4-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-5-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-6-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-7-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-8-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-9-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-10-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-11-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-12-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-13-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-14-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-15-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-16-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-17-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-18-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-19-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-20-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-21-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-22-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-23-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-24-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-25-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-26-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-27-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-28-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-29-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-30-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-31-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-32-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-33-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-34-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-35-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-36-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-37-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-38-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-39-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-40-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-41-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-42-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-43-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-44-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-45-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-46-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-47-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-48-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-49-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-50-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-51-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-52-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-53-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-54-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-55-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-56-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-57-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-58-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-59-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-60-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-61-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-62-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-63-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-64-0x0000000460000000-0x000000046025A000-memory.dmp

        memory/5020-65-0x0000000460000000-0x000000046025A000-memory.dmp