Analysis

  • max time kernel
    43s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    19/10/2022, 22:31

General

  • Target

    774c80a1a6ce32235c7d0b490cfa06d454872ad18fbfe3b2b17e052d0528349b.exe

  • Size

    104KB

  • MD5

    921d9a2bb90978870d68aa69ed25b360

  • SHA1

    e5e87885d8a8ab92b6926eba7f17a74d9c383a0f

  • SHA256

    774c80a1a6ce32235c7d0b490cfa06d454872ad18fbfe3b2b17e052d0528349b

  • SHA512

    09f8801027b5d9ae703a08ccc9a86f4814709f1fa0b340cdeb19b2336d1e4129b19f042cd804af6f30931eb1517df29ff9a1a33d6808f65b390f7e65c06f68f0

  • SSDEEP

    1536:x4lARZWBIgYISE+cUkZASecHek8cqvY9B/xKPkdWOfGrhYTKv1/qWfqFw:JZ1gEcUMAVAezFxeWOuFYTKBqWyF

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: MapViewOfSection 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\774c80a1a6ce32235c7d0b490cfa06d454872ad18fbfe3b2b17e052d0528349b.exe
    "C:\Users\Admin\AppData\Local\Temp\774c80a1a6ce32235c7d0b490cfa06d454872ad18fbfe3b2b17e052d0528349b.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: MapViewOfSection
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1324-58-0x0000000076F90000-0x0000000077139000-memory.dmp

    Filesize

    1.7MB

  • memory/1932-54-0x0000000000220000-0x0000000000230000-memory.dmp

    Filesize

    64KB

  • memory/1932-55-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

  • memory/1932-56-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

  • memory/1932-57-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB