Analysis
- max time kernel
149s - max time network
143s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/09/2026, 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Tolz Loader.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tolz Loader.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Tolz Loader.exe
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Tolz Loader.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target Tolz Loader.exe
- Size 3.8MB
- Sample260924-vb3nfayzes
- SHA256 17876df36a2e2375e7ff97a07d33240db0fe475b5c2efd7aeddf5beae0e9c702
- MD5 6e17fb8b676260d6cab27550d77f0473
- SHA1 4981134894ccc70cd0ea46956b8364a7951cc4e0
- SHA512 8c9e2bc75d17d12345fd220781670d4ead74b99ee8545f9298d29aa325e77d1294f74d53663f3ce7e3e82b8e17a2a17ee7c8a24416bf6cd79f2a83ba7703df68
- SSDEEP 49152:SnV0TReklP9uQ50zjRzn2j46L3tc/0iCgOhmeSB69L6L3tc/0iCgOhmeSB69:7Ph5uM4uZiCpIeSguZiCpIeS
- TLSH T1F706E103E35582DCD56799788AA69747F371B8411F24EBCB32D82A59AF532F00E7B390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 4 IoCs
pid Process 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe 5016 Tolz Loader.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5016 Tolz Loader.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5016 Tolz Loader.exe