Analysis
- user interaction
yes - max time kernel
14s - max time network
11s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 20:35
Behavioral task
behavioral1
Sample
6767.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6767.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 6767.exe
- Size 23.7MB
- Sample260930-zc9wcsswhx
- SHA256 8b55906bfec81006eed0cb1678136f4539683e264dae855c79cceb3ba518ab65
- MD5 efe6e495507d9c1816a6df1a7268550d
- SHA1 bb3ba5fe4d417cb77f61ee70aebcae7eb1cb08f9
- SHA512 b599eee3c0a39a47d13acf133ddb4ab78996f56a68ad2993acb383ef61c54e55e468f0ca171f5a61172a2b8c2a0d39f247ac7f071258cec363131e8f515a8d72
- SSDEEP 393216:omnbLJErwQyezCmhKjFHi59j3nD8Lq+k57i:HnPJErwQnzCzO9jz8ye
- TLSH T1BD4712D128E151ECC3A3C635D2CA2AF9D3D6759A5E76961F7FC650022632C42CDE2C3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
pid Process 5444 6767.exe 5444 6767.exe -
resource yara_rule behavioral2/memory/5444-0-0x0000000000400000-0x0000000002C82000-memory.dmp upx behavioral2/memory/5444-1-0x0000000000400000-0x0000000002C82000-memory.dmp upx