369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11 | Triage™

Analysis

max time kernel
113s
max time network
122s
platform
windows10_x64
resource
win10v20201028
submitted
09/11/2020, 20:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11.exe
Size 4.2MB
Sample201109-ce8e2y84vn
SHA256 369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11
MD5 49bfbc0a797b7f9262c582b518cb933e
SHA1 3dd23101e9c1c9009bf33bd7e9f41187f161a965
SHA512 26cb6a7a136a6f1872888926fad8a0d268c22c1281a4e21fe9a1d0fc2dafc3c234bc2f12c0bf47ddb7ffa07cba4d958f13997af62a83f7e5f154295c71094b7e
MD5 SHA1 SHA512

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
4076	369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
4076	369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4076	369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11.exe
4076	369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11.exe

C:\Users\Admin\AppData\Local\Temp\369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11.exe
"C:\Users\Admin\AppData\Local\Temp\369fc40113a588ab1916d537d07b1151ea60bbb4f5d1a7f2de841b94791a2d11.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
PID:4076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads