Analysis
- user interaction
yes - max time kernel
24s - max time network
27s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
02/10/2026, 17:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Taisho.cc.exe
Resource
win10ltsc2021-20260911-en
3 signatures
150 seconds
General
- Target Taisho.cc.exe
- Size 18.6MB
- Sample261002-wcb3jsvv8j
- SHA256 dc87f9edf98d6ce0fef1790856b768cf15b2220d65f3fb03febc5a60b1a043f9
- MD5 aa95b7710d270a0ae6e8a93fa80de5cf
- SHA1 d945a444347dea199602b05eafbc200383af4c60
- SHA512 a7951049c21a96ab11e4c8557140036d6030d4ae36989288986d37d7d227c4c8aae9eedabe548ae22717c1f2c39cd4baff19e12dcea8dd397cde02252b0ce982
- SSDEEP 393216:EbOEdJ7iZuJXbrhnMzdB81oI2kSWprQucNx/vIzsY6rX5IWqCe71wl0gW0:qMzdB8aI2kSWprvqBIoHxqCsuVW
- TLSH T1DC17AD43F342C980C8164A358D56DBE587327C29AF1617973184BF1FBEB32C26E7A691
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
pid Process 2664 Taisho.cc.exe 2664 Taisho.cc.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Taisho.cc.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Taisho.cc.exe - Suspicious behavior: EnumeratesProcesses 42 IoCs
pid Process 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe 2664 Taisho.cc.exe