9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91 | Triage

Analysis

max time kernel
43s
max time network
79s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
04-02-2022 13:23

Sharing

Report Analysis Logs

General

Target

9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe
Size

5.0MB
MD5

c182610dd437f90d0cc6cb0ac19cfdb7
SHA1

9729820748673938e057ce74d007b758f6f9b195
SHA256

9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91
SHA512

618bb4559c36eec0b8e3552c16b94b0060d68186b9864ca6670d8a17225088a69a498a367a226f5944a3b7d79a61565cd7123e27001053000b6d42d86352051a

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes:

9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe

pid process

920 9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe

pid	process
920	9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe
920	9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe

C:\Users\Admin\AppData\Local\Temp\9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe
"C:\Users\Admin\AppData\Local\Temp\9c2bab6fc93db69b1b4771a0f599255728c8a1d0636a4c23f74190ef5f5def91.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...