345ed143bf3a28f74de72fa62a271a67fb28ae04e6ca0fefa8eb09c7782dc3e6 | Triage™

Analysis

max time kernel
13s
max time network
99s
platform
windows10_x64
resource
win10v20201028
submitted
09/11/2020, 20:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
REVISED INVOICE DRAFT & FINAL DOCS - DHL WAYBILL 50 9081 1806_IMG.exe
Size 76KB
Sample201109-ptw263mwgn
SHA256 345ed143bf3a28f74de72fa62a271a67fb28ae04e6ca0fefa8eb09c7782dc3e6
MD5 7d53114c389b985c3004e24220eac9fd
SHA1 c32cfb5b8bb8589e538d62be8a754a345caef6df
SHA512 249dd2944e9971203f60d575729e63ab2aa4f09134028bb3af87637ea8e0af817ffc0149a2368a8a222cf773c384ad7abcbb197589739ad4104645404e3b4059
MD5 SHA1 SHA512

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
1180	REVISED INVOICE DRAFT & FINAL DOCS - DHL WAYBILL 50 9081 1806_IMG.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1180	REVISED INVOICE DRAFT & FINAL DOCS - DHL WAYBILL 50 9081 1806_IMG.exe

C:\Users\Admin\AppData\Local\Temp\REVISED INVOICE DRAFT & FINAL DOCS - DHL WAYBILL 50 9081 1806_IMG.exe
"C:\Users\Admin\AppData\Local\Temp\REVISED INVOICE DRAFT & FINAL DOCS - DHL WAYBILL 50 9081 1806_IMG.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:1180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads