Overview

overview

5

Static

static

944b56180f...1f.exe

windows7-x64

5

944b56180f...1f.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    34s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 11:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    944b56180fbc36d88b3a624f2f8549003739813a5b0d53b4eed66fcb2c47891f.exe

  • Size

    75KB

  • MD5

    9510c5248d77e64ff33de5f08bd8996f

  • SHA1

    51e214319fb9d9b15cb0293e6dab4b1548f8f55f

  • SHA256

    944b56180fbc36d88b3a624f2f8549003739813a5b0d53b4eed66fcb2c47891f

  • SHA512

    c218a0be736c4270250e9a3719face586c8c431761ac8389f143573505d361b48b9530c944fe9557d60dde01ac3246b451132293d53961d57ea255fc848d5ccc

  • SSDEEP

    1536:nScnyya3fv+Uwi7iIa1cx6ufaTZO5ZlE11j7OrzZo:nScyyavO6haG6ufaTZclEbj7UzZo

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: MapViewOfSection 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\944b56180fbc36d88b3a624f2f8549003739813a5b0d53b4eed66fcb2c47891f.exe
    "C:\Users\Admin\AppData\Local\Temp\944b56180fbc36d88b3a624f2f8549003739813a5b0d53b4eed66fcb2c47891f.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: MapViewOfSection
    PID:1780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1196-58-0x0000000077BA0000-0x0000000077D49000-memory.dmp
    Filesize

    1.7MB

    Download
  • memory/1780-54-0x0000000000400000-0x0000000000417000-memory.dmp
    Filesize

    92KB

    Download
  • memory/1780-55-0x0000000000400000-0x0000000000417000-memory.dmp
    Filesize

    92KB

    Download
  • memory/1780-56-0x0000000000400000-0x0000000000417000-memory.dmp
    Filesize

    92KB

    Download
  • memory/1780-57-0x0000000000400000-0x0000000000417000-memory.dmp
    Filesize

    92KB

    Download