Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/10/2026, 16:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe
Resource
win10v2004-20260911-en
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe
- Size 584KB
- Sample261005-th2jaaxbje
- SHA256 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304
- MD5 f85089702b4e9a62b940d3a926974565
- SHA1 c98748eada81bb48dcae080c733513ba5930ce28
- SHA512 bad6977f714fca7cea3a9a295fc8cbc047b69339596095ea68c4d578ddc655de8b7141418fe138c8ad3d53fbb072a12d0c699fc1c018d099e26223d717dea06c
- SSDEEP 12288:UohmTwFn/P0ZxYxJN7lubjba00HkBE+t1Jo0E:UPT4n/PuYx37luv50HhUO0
- TLSH T1E9D4E0553364D603C96627F45932F2780BB8AEEEA921D21A9FD5ADEF3932F008D40753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 4864 set thread context of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 - Suspicious use of WriteProcessMemory 9 IoCs
description pid Process procid_target PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90 PID 4864 wrote to memory of 2960 4864 73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe"C:\Users\Admin\AppData\Local\Temp\73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4864 -
C:\Users\Admin\AppData\Local\Temp\73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exeC:\Users\Admin\AppData\Local\Temp\73751b6b6cef4a26579275fe51f68847418099594562f25205f36637c8b63304.exe2⤵PID:2960
-