Analysis
-
max time kernel
93s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
26-06-2022 23:34
Static task
static1
Behavioral task
behavioral1
Sample
35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exe
-
Size
902KB
-
MD5
36042088f59bd84cd4e29e2bd17efd5a
-
SHA1
bc6201106cf04cadd99fa0115820782ad6242688
-
SHA256
35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af
-
SHA512
74b3dc706aeb2d057e76e241437f08c4240f08d78fbec4f42a862b22c4d14b328734959dd3ef97fff3c777fa3817c1794080294cd6ace1b837917fdec7ba7fe9
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes:
35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exepid process 764 35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exepid process 764 35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exe"C:\Users\Admin\AppData\Local\Temp\35a108a8c0eb4760794f4c991ab423030185156ea67fb91f628ba8baacea41af.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx