Analysis

  • max time kernel
    180s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/11/2022, 11:33

General

  • Target

    09c4eb7f6e8a050eb2e7c4128fb6646ae8cd0c4c6b624276cc0c16cb223dcf12.exe

  • Size

    816KB

  • MD5

    87192265e13bdbb9faf7a617f8b546c6

  • SHA1

    f7cb3cdcb6c87f42d5db8ff19e7471f5730a1fac

  • SHA256

    09c4eb7f6e8a050eb2e7c4128fb6646ae8cd0c4c6b624276cc0c16cb223dcf12

  • SHA512

    928f1dcfb993a89c986b925095bfc8688459dbde8ea81b1cdff6705b0ebe7bd3aa784644144101b6c43971934003ff0283f59b14d356a6ed12f0a88fd37ecb1b

  • SSDEEP

    24576:O3xEEHH8YHQWlz4Ai5NB4ZAWH/O6Yd9V1YYgtXsh:d+8YHFz47XMAo/jw9ndB

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\09c4eb7f6e8a050eb2e7c4128fb6646ae8cd0c4c6b624276cc0c16cb223dcf12.exe
    "C:\Users\Admin\AppData\Local\Temp\09c4eb7f6e8a050eb2e7c4128fb6646ae8cd0c4c6b624276cc0c16cb223dcf12.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1124-132-0x0000000000400000-0x00000000005EB000-memory.dmp

    Filesize

    1.9MB

  • memory/1124-133-0x0000000000400000-0x00000000005EB000-memory.dmp

    Filesize

    1.9MB

  • memory/1124-134-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-135-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-136-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-137-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-138-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-139-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-140-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-141-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-142-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-143-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-144-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-145-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-146-0x0000000000401000-0x00000000004C7000-memory.dmp

    Filesize

    792KB

  • memory/1124-147-0x0000000000400000-0x00000000005EB000-memory.dmp

    Filesize

    1.9MB