9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc | Triage™

Analysis

max time kernel
62s
max time network
123s
platform
windows10_x64
resource
win10v20201028
submitted
09/11/2020, 20:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc.exe
Size 4.2MB
Sample201109-ssfl9av48a
SHA256 9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc
MD5 c4c1cdb0bbf2f9f14cf9da93393e6f52
SHA1 4d188361242cdaa825656cf8b13c4cfd03b5f7f8
SHA512 16ace1ff72855fcf4e501a0d2174882f02a3142347dd1e49625afac47b1c72f53b507a0281f8212a0e3d0a84b01b9f2eb9dfbbbf603c6a9812fa3f8d09623aad
MD5 SHA1 SHA512

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
4752	9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
4752	9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4752	9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc.exe
4752	9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc.exe

C:\Users\Admin\AppData\Local\Temp\9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc.exe
"C:\Users\Admin\AppData\Local\Temp\9fd40d22f5ff232a91ed5a5cf02d0b2c1ef24ec36035c9dbf5af9b709db9b7bc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
PID:4752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads