Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-en-20211014
  • submitted
    06-12-2021 14:51

General

  • Target

    Facebook Ads Checker Tool.exe

  • Size

    1.4MB

  • MD5

    d057d7dd9b8c94c1b6b6fe2b1a4ae5a9

  • SHA1

    0416166bc9603cfbaf822d4ddeb8ff477053a84b

  • SHA256

    ae2ad42deb8098ffda7b7b2b7a1dcc881cff6cee2b4da7ef5724de1d2fadf067

  • SHA512

    48941e2236ef447109eafb0dd0cd3128985cae78fd42af2af26ec3c755e82bb0b615606e8ba0d932effdd37c08c1db48956a18015682c516154a422631e445c3

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Facebook Ads Checker Tool.exe
    "C:\Users\Admin\AppData\Local\Temp\Facebook Ads Checker Tool.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/588-55-0x0000000075B71000-0x0000000075B73000-memory.dmp
    Filesize

    8KB