a3ced3ad66ebdf1e029a04f65a71389ee2298312f29a992c6b3d785da288ffb4

Analysis

user interaction
yes
max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 04:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Arc.exe
Size 12.4MB
Sample261027-fa747sav91
SHA256 a3ced3ad66ebdf1e029a04f65a71389ee2298312f29a992c6b3d785da288ffb4
MD5 1f18d79bec836c6865baf46b750ad520
SHA1 f9e461fb0fac0472fdb6a0a3742fdfcbe4e7a1e3
SHA512 87887f2a71e815ce2a133a2ef17c4773b88d883192ba4abdf555f199d6a6ecf610c425f5c7cd90c65c95e0dfeee38b61e6e32a6204725ad8a30b10e80be9872d
SSDEEP 393216:69ltwI1/qpFS5kn2b17ZbMCY9bdOkjilmYmxn/K0Rj:69LJ6k5kc1h9Y9IPmYmM0R
TLSH
T177D633AFA8DE82FDC8019874EE4550E2F489F944487E1C5A5BCF0F01EA34C56E592F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4424	Arc.exe
4424	Arc.exe

C:\Users\Admin\AppData\Local\Temp\Arc.exe
"C:\Users\Admin\AppData\Local\Temp\Arc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4424-0-0x00007FF691D4E000-0x00007FF69273A000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads