Analysis

  • max time kernel
    45s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    30/10/2022, 13:36

General

  • Target

    0702d440b25be8a2d4b83e4a63c690628b15fd5893fd363423ed5a1a2e5cae6c.exe

  • Size

    73KB

  • MD5

    849606c949e22de0f2e0570620c0aea0

  • SHA1

    5498c964671a7195dd62d87409a87716a5eb0fc2

  • SHA256

    0702d440b25be8a2d4b83e4a63c690628b15fd5893fd363423ed5a1a2e5cae6c

  • SHA512

    82b4198b2780a72236a3fc5705c4e6f77f03beface221202cfec6a8bee20efa597d95baf9c344c9243967e99b12df978bfb32fde3eea9fc2ee7cf4c60be32938

  • SSDEEP

    1536:WvEGfwCKR6CbXZ7ppkKLm8BFotonFSLSqjmq:Wssw/kCbJwKLmaFVIm

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: MapViewOfSection 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0702d440b25be8a2d4b83e4a63c690628b15fd5893fd363423ed5a1a2e5cae6c.exe
    "C:\Users\Admin\AppData\Local\Temp\0702d440b25be8a2d4b83e4a63c690628b15fd5893fd363423ed5a1a2e5cae6c.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: MapViewOfSection
    PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1204-59-0x00000000776A0000-0x0000000077849000-memory.dmp

    Filesize

    1.7MB

  • memory/1764-54-0x0000000075BA1000-0x0000000075BA3000-memory.dmp

    Filesize

    8KB

  • memory/1764-56-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

  • memory/1764-55-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

  • memory/1764-57-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

  • memory/1764-58-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB