8ad7f56f8701807d0b089d520d2f2625b20aaf06777ac0c4c79edb3ae1395aea

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/10/2026, 23:41

Target
file.exe
Size 5.5MB
Sample261012-3pht7ay14j
SHA256 8ad7f56f8701807d0b089d520d2f2625b20aaf06777ac0c4c79edb3ae1395aea
MD5 9b9e87808cbed598bc97659ff6122386
SHA1 dbd9e31d628c3ae8cadc31e9384dcfdca0f3c3a6
SHA512 5561768878d289ade3b0d0e474ef4390856d59bf8c20154147c916940f7df52723bc9866d0743420561f35c54753971e4de1259963e3c8899e47c8c8d48de07e
SSDEEP 98304:6A+YtMWo3B6d7sclAn7uuW4Yj7PhaHeYHLKhjZevjN2FkicGMDqVj5WGe96UsBuM:6PYtro3BO4Nn7Q37ZinLKhjILNDxqIGh
TLSH
T145463396C1BF77F5FA557E720A04BAB75D3D60720C9221B443B8ADEC613A26C4AD0B31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4656 set thread context of 4528	4656	file.exe	89

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89
PID 4656 wrote to memory of 4528	4656	file.exe	89

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:4656
- C:\Users\Admin\AppData\Local\Temp\file.exe
  "C:\Users\Admin\AppData\Local\Temp\file.exe"
  2⤵
  PID:4528

memory/4528-0-0x0000000140000000-0x00000001402C1000-memory.dmp

Download