39af02aa4577747a15d49bb22d75fb5494ae37831cf44e9a49827ddb2597d758

Analysis

geolocation tags

cacanadananorth-americatoronto
max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 00:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Infinity-Free-Beta.exe
Size 34.9MB
Sample261030-a7eahavv8p
SHA256 39af02aa4577747a15d49bb22d75fb5494ae37831cf44e9a49827ddb2597d758
MD5 2f925fbeaac4140832df34d92acbe256
SHA1 943d0d91ef84989a70a62c3124926bc9c825345c
SHA512 284a356c81af37cfb880e9988da82dc4c0454a814dd1b081c417afdd3368fb51fd006e48eef6527f1282459cfa58f0820b1c33f9f3f83887c06c6a7eecd3da7c
SSDEEP 786432:9Q+nzwD5MOL1remFsfZA1mu+9OS2mp3ZBw9:9nzg5MCFOZA1a9xdZBw9
TLSH
T1BD872367A9C863B4C4C35544A29F465F63C1D57AC2FF8D1827CB2C023A12D674A4EEBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4848	Infinity-Free-Beta.exe
4848	Infinity-Free-Beta.exe

C:\Users\Admin\AppData\Local\Temp\Infinity-Free-Beta.exe
"C:\Users\Admin\AppData\Local\Temp\Infinity-Free-Beta.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4848-0-0x00000001400FB000-0x0000000141961000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads