8808f92e0f10af30748239f3f33c5c657470f070a0d44ace2591b1c9b8472bf2

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PigeonRBX 1.9.exe
Size 46.4MB
Sample261113-alwyesdz21
SHA256 8808f92e0f10af30748239f3f33c5c657470f070a0d44ace2591b1c9b8472bf2
MD5 64b50f9e69c6ae60a110c3b16d364931
SHA1 322bb619f2a9f548f6f56128e95b4de450c4cfb4
SHA512 2477dcee68f6ea539c097f1b9a0a420ecfb01f5423918a7fc24756628d976f3b96b4cbea21b61ba588844be135370d69c76f0c900665e906a662577e7f60165e
SSDEEP 786432:6eQWCXQ/+j5hMYgwKxyT3gm4Ed1sxZhwvMEXhaKOO94wn96t9LNFODOBYH/XJAg:pOg/+j/V4dl0qMct3CfXJ
TLSH
T154B712D669E151ECCBC1C534D24E2AFAE2C538AA4DBA983ABFC644013530D96CCE5D37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4752	PigeonRBX 1.9.exe
4752	PigeonRBX 1.9.exe

C:\Users\Admin\AppData\Local\Temp\PigeonRBX 1.9.exe
"C:\Users\Admin\AppData\Local\Temp\PigeonRBX 1.9.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4752-0-0x00000001401E7000-0x000000014202B000-memory.dmp

Download

memory/4752-1-0x0000000140001000-0x0000000140113000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads