Analysis
- max time kernel
149s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
22/09/2026, 09:40
General
- Target 9fa59a8af9623eb3a4946d5a014ec5d027a406bef0aaa4cdcb44c2f313098ff7.bin.exe
- Size 371KB
- Sample260922-lndemsshqa
- SHA256 9fa59a8af9623eb3a4946d5a014ec5d027a406bef0aaa4cdcb44c2f313098ff7
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9fa59a8af9623eb3a4946d5a014ec5d027a406bef0aaa4cdcb44c2f313098ff7.bin.exe"C:\Users\Admin\AppData\Local\Temp\9fa59a8af9623eb3a4946d5a014ec5d027a406bef0aaa4cdcb44c2f313098ff7.bin.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3408-0-0x0000018E93AF0000-0x0000018E93B58000-memory.dmp
memory/3408-1-0x00007FFF8C3FF000-0x00007FFF8C400000-memory.dmp
memory/3408-2-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-3-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-5-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-4-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-6-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-7-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-8-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-9-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-10-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-11-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-12-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-13-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-14-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-15-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-16-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-17-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-18-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-19-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp
memory/3408-20-0x00007FFF8C270000-0x00007FFF8CC14000-memory.dmp