Analysis

  • max time kernel
    100s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/10/2022, 20:41

General

  • Target

    eb2afba87dcf5626119e2b7e3ec17e5eb6e03f6d207e48949ff811b0b27cd770.exe

  • Size

    1.3MB

  • MD5

    a86945e13d0959e435c8d6c71f6cc516

  • SHA1

    ed4e239c0bb440ee969a205315aeaa22c421a924

  • SHA256

    eb2afba87dcf5626119e2b7e3ec17e5eb6e03f6d207e48949ff811b0b27cd770

  • SHA512

    5b14318daaf07f0d2fae69de90376ddb6e3967c88ccfaaffaa284960856f3a361ce746ccb47e2229212c6d7e8b840aa9f3576eb334a747fa2f83a64fcb9e795b

  • SSDEEP

    24576:zVySJJdwZ6tIc8jALh5vsbikkmiJk1c2iPBcfgyB:zVyqzwEaALh5v4JYk15iPKf

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eb2afba87dcf5626119e2b7e3ec17e5eb6e03f6d207e48949ff811b0b27cd770.exe
    "C:\Users\Admin\AppData\Local\Temp\eb2afba87dcf5626119e2b7e3ec17e5eb6e03f6d207e48949ff811b0b27cd770.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4844

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4844-132-0x0000000000400000-0x000000000055F000-memory.dmp

          Filesize

          1.4MB

        • memory/4844-133-0x000000007FE20000-0x000000007FE45000-memory.dmp

          Filesize

          148KB