98f2b8ea82cedfd1a4aa68d68db423f20f67b5ca165f6bb5a3908a6c1421e2bf

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 00:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
exe.exe
Size 2.5MB
Sample261102-a28l6aes4x
SHA256 98f2b8ea82cedfd1a4aa68d68db423f20f67b5ca165f6bb5a3908a6c1421e2bf
MD5 a61aaa53875d4e327e55f3be02228ed2
SHA1 32af6348d8ac0442e679a9967c2ea316b36cd5f3
SHA512 e09859ef08eee75f83b61afee12acb96130bc403cf6bcb6b653db0281ab496ddbf258ea650dfa1a307add705555fcd294cf0de9639ab62c8dad031bee676c486
SSDEEP 49152:g7sY4tyBqJmX3Gp2XbegyepU5enYzq52ED6n7Ir1bSAq0j55HveB:MqeeB
TLSH
T14BC5D70A51BF52E6FBFF4538401A3743FD3134851E25B7BB089846C62791B64AE3EB92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtCreateThreadExHideFromDebugger 1 TTPs 4 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
900	exe.exe
900	exe.exe
900	exe.exe
900	exe.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
900	exe.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
900	exe.exe

C:\Users\Admin\AppData\Local\Temp\exe.exe
"C:\Users\Admin\AppData\Local\Temp\exe.exe"
1⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads