Analysis
- max time kernel
139s - max time network
137s - platform
windows7_x64 - resource
win7v20201028 - submitted
09/11/2020, 20:37
General
- Target Mage Properties Order Receipt #2020172602US_pdf.exe
- Size 172KB
- Sample201109-bf5d9a67cs
- SHA256 c98091ed44cd76e438ce2e7a9c71b57d37ff45903d365162040af94fa143b9f5
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Mage Properties Order Receipt #2020172602US_pdf.exe"C:\Users\Admin\AppData\Local\Temp\Mage Properties Order Receipt #2020172602US_pdf.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx