6f868dd40b95104df999c5b2e3bd6db1a8b366e4fd5ae761bdad4b1187693ccf

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 15:37

Target
476160d6.exe
Size 1.3MB
Sample261102-s2qqfsa19x
SHA256 6f868dd40b95104df999c5b2e3bd6db1a8b366e4fd5ae761bdad4b1187693ccf
MD5 015445e80f58c04d780ab3634dff059f
SHA1 aeec659e781d3a7ff1ceef3992302952b4d9ff0d
SHA512 0378d36f8d6d84a232aa5f655821bff1e1011caacfa5764e6ded786346318fbd9d77e833a86d58da9544f912a8bac4d1ba9d0a64309341fd0ed122388ef83fec
SSDEEP 24576:t5xNTQZUgRRrcfyFLh/LDqSGep9oAdU/8ZfiTnG30xs8nKvG1Z5:t5xNTyUgDcfWLh//qspav/hTnJs8QG1D
TLSH
T16D55AE46F3B642ECC2678238C766931BEB75B81913204BCB63D05A56BF53AE19F79310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

C:\Users\Admin\AppData\Local\Temp\476160d6.exe
"C:\Users\Admin\AppData\Local\Temp\476160d6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3320

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6132

C:\Users\Admin\AppData\Local\Temp\476160d6.exe
"C:\Users\Admin\AppData\Local\Temp\476160d6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5744

C:\Users\Admin\AppData\Local\Temp\476160d6.exe
"C:\Users\Admin\AppData\Local\Temp\476160d6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5988