e4da336225b2839720f68c6e9d65c33e2c606e6460174fb7f5b54c5412e84e8a

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 22:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Brat_Client-(99045145).exe
Size 33.3MB
Sample261030-2amn6agy3j
SHA256 e4da336225b2839720f68c6e9d65c33e2c606e6460174fb7f5b54c5412e84e8a
MD5 050a33761d1a05e7c2ccaaf6f48c5fd5
SHA1 8f9d49a8c0084b7d0c549def6f2b9abb7b209295
SHA512 f2c906cc26f1372ee8040e96012b467d7e4a3dfae25d65b1fec1ed4ae53e9c57dbbe339b30fcc3971d73d3a8912b039db56247dbfd1fa076a3173e5815b47eeb
SSDEEP 786432:nV6IJ4peBNoJATRB52PItzgxi2IaSg2tVa:nVHJMUNoqTt2PfVIbg2tw
TLSH
T1CE7712D578D052ECC6D2C030E28E5BFEE19674790EBA082FBFC619012631D96DDA6D36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4176	Brat_Client-(99045145).exe
4176	Brat_Client-(99045145).exe

C:\Users\Admin\AppData\Local\Temp\Brat_Client-(99045145).exe
"C:\Users\Admin\AppData\Local\Temp\Brat_Client-(99045145).exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4176-0-0x00000001406C6000-0x00000001418E5000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads