Analysis
- max time kernel
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/09/2026, 22:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JK KING LOADER 1.8.8.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
JK KING LOADER 1.8.8.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target JK KING LOADER 1.8.8.exe
- Size 71.9MB
- Sample260912-1yllbswdpd
- SHA256 844ec75a0d746ea4553b51f54b9f6d1878f6682784c160fa15bfcb30b5f82114
- MD5 c4f40824451ac5eb24e9e891aecbdb65
- SHA1 3a3256bf96d835164a15aeaad5ad4d4275fd4655
- SHA512 c98e8c0e3e816b1a7053fad423aa765827371aadbcfe844ae6ba9d8e3e76506a308d6e1434d9cc58b1d02e37f933e01426e6956e94163503025b6cdd28eeebc0
- SSDEEP 1572864:LVsU0/LCl2Ht3wBJedxHPG6fdqFz1RxaJUkGKqwrKh:yWlOU4dxHPbKjxaC7wrK
- TLSH T148F73335992736D5C49099FC4DE6A79C26A177E028F4FAC1F910B65926DB3822FC23F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2804 JK KING LOADER 1.8.8.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2804 JK KING LOADER 1.8.8.exe 2804 JK KING LOADER 1.8.8.exe