51163c6c0eea7eabc5a6b49387306d23a2dc5ece1dfbdfd04f26efa5b2e3d05a

Analysis

user interaction
yes
max time kernel
28s
max time network
33s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/10/2026, 22:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gen1_spf.exe
Size 74.2MB
Sample261024-2dbq3axva1
SHA256 51163c6c0eea7eabc5a6b49387306d23a2dc5ece1dfbdfd04f26efa5b2e3d05a
MD5 5b81a9a2d5afe5477acf26fba4b07669
SHA1 a4604c37a3a0a6b017c2df6b75f7a83cbe23fa1a
SHA512 ad45e16df994fdcb3fa712d89953f441b76b5579a3b0a3299f9a2342dac2f8c6119ac7c8d8fae90cb126fb622eedb254da2db58fbc193dcfe7265b87fd31883e
SSDEEP 1572864:pyrjm4jme98tz1c2T6sT0aUXqg2Sc9HykXx:ptgU5qTaUH9MH
TLSH
T1FE0823A754E671E494DF0940628A33DE61D0E199CCDE552C0AFB2C026F30EFB5B89A77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 4 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4912	gen1_spf.exe
4912	gen1_spf.exe
2244	gen1_spf.exe
2244	gen1_spf.exe

C:\Users\Admin\AppData\Local\Temp\gen1_spf.exe
"C:\Users\Admin\AppData\Local\Temp\gen1_spf.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4912

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5484

C:\Users\Admin\AppData\Local\Temp\gen1_spf.exe
"C:\Users\Admin\AppData\Local\Temp\gen1_spf.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads