Analysis
-
max time kernel
53s -
max time network
182s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
08/09/2022, 04:47 UTC
General
-
Target
7f72bb2eb4ea1f0914a9cb1de72d424efe2e183a7a78ef974a655914a9ce9790.exe
-
Size
6.5MB
-
MD5
a037f22807116f6b8353480b4898f642
-
SHA1
81c121d4b201faadc62ea29e1caa0e855abc6dc1
-
SHA256
7f72bb2eb4ea1f0914a9cb1de72d424efe2e183a7a78ef974a655914a9ce9790
-
SHA512
1b2e811b521fe0808da99ef556aed386d47c1556b6d7656c630e3080585465da16f445a3a28058986483da785544d849cdc7b6a39fe834143155a20ae7b436bb
-
SSDEEP
196608:O3oKkJpbmOREqZa30Kq++67O1bVrPphR5:Wo3QOREJqjvBPvH
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f72bb2eb4ea1f0914a9cb1de72d424efe2e183a7a78ef974a655914a9ce9790.exe"C:\Users\Admin\AppData\Local\Temp\7f72bb2eb4ea1f0914a9cb1de72d424efe2e183a7a78ef974a655914a9ce9790.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 2682⤵
- Program crash
-
Network
- No results found
-
20.189.173.2:443
No results found
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
14.5MB
-
Filesize
14.5MB
-
Filesize
1.6MB
-
Filesize
152KB
-
Filesize
192KB
-
Filesize
14.5MB