Overview

overview

10

Static

static

3e035f2d7d...in.exe

windows7_x64

10

3e035f2d7d...in.exe

windows10-2004_x64

5

Resubmissions

07/05/2025, 16:12

250507-tnvb6awlz76

03/04/2025, 18:30

250403-w5k6xs1zhw6

28/06/2022, 12:30

220628-ppntjshddq10

28/06/2022, 12:24

220628-pk7qvshdbl10

Analysis

  • max time kernel
    138s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    28/06/2022, 12:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    3e035f2d7d30869ce53171ef5a0f761bfb9c14d94d9fe6da385e20b8d96dc2fb.bin.exe
  • Size 71KB
  • Sample220628-ppntjshddq
  • SHA256 3e035f2d7d30869ce53171ef5a0f761bfb9c14d94d9fe6da385e20b8d96dc2fb
  • MD5 SHA1 SHA512
Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e035f2d7d30869ce53171ef5a0f761bfb9c14d94d9fe6da385e20b8d96dc2fb.bin.exe
    "C:\Users\Admin\AppData\Local\Temp\3e035f2d7d30869ce53171ef5a0f761bfb9c14d94d9fe6da385e20b8d96dc2fb.bin.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:3620

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads