Analysis
-
max time kernel
39s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
20/10/2022, 20:05
Static task
static1
Behavioral task
behavioral1
Sample
74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe
Resource
win10v2004-20220812-en
General
-
Target
74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe
-
Size
116KB
-
MD5
96fe33caa7c173b729a353fc4a10c4b0
-
SHA1
40eb4466a4f95df697356e2e694af347a2e12501
-
SHA256
74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932
-
SHA512
71354c4f254e177edb90da8fa966e53e50baf0bb0b8bbfc8df40ea9324091389908d3747c8ae1ae65be7c4922e22504a875ccba5b8c3b5e896777455f286c3e6
-
SSDEEP
1536:NGHweBt064h+c4dPQsjVxosWX+qhxB6UTeT1QzKwa+mKzBvcy6f:QHwYfcWjVmN+qx6USJQpdvcT
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 864 74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe -
Suspicious behavior: MapViewOfSection 2 IoCs
pid Process 864 74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe 864 74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe"C:\Users\Admin\AppData\Local\Temp\74e00dfe439e538faeebd1008a2c95fd775c9c89d31e6b9fac76b76779af2932.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: MapViewOfSection
PID:864