219b6e9db2bdc69a8ae75c25630c45a25df4956b9865d7805100c5a61d799cd3

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 04:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
219b6e9db2bdc69a8ae75c25630c45a25df4956b9865d7805100c5a61d799cd3.exe
Size 20.7MB
Sample261110-e3b2sstw4j
SHA256 219b6e9db2bdc69a8ae75c25630c45a25df4956b9865d7805100c5a61d799cd3
MD5 a2b3d524668cdd46f804f1c0acd84864
SHA1 c737d3e3463f4a6bbf93525c78d37effa3e044fd
SHA512 4d3e6bfe6d250820ef3175a50aff46c0ff4aa2a79cf830d026ff8ebbaa51663c7756fc9a0df6ad52812fc09cf7b6d9814c99562f9e15efde9f786bd408e53ed4
SSDEEP 393216:d5hhMT+QkCwnv7825Fm5foe1Mh0/T2R9gqZ:d3hMT+zLWoe1MKC+u
TLSH
T1E62701DA38D5507DC092C735D28A5AFDF08A79894D799C1BBFC359002E32C96C8B6B36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
900	219b6e9db2bdc69a8ae75c25630c45a25df4956b9865d7805100c5a61d799cd3.exe
900	219b6e9db2bdc69a8ae75c25630c45a25df4956b9865d7805100c5a61d799cd3.exe

C:\Users\Admin\AppData\Local\Temp\219b6e9db2bdc69a8ae75c25630c45a25df4956b9865d7805100c5a61d799cd3.exe
"C:\Users\Admin\AppData\Local\Temp\219b6e9db2bdc69a8ae75c25630c45a25df4956b9865d7805100c5a61d799cd3.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads