Analysis

  • max time kernel
    211s
  • max time network
    337s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2022, 11:33

General

  • Target

    ļ޸/°汾鿴.exe

  • Size

    816KB

  • MD5

    87192265e13bdbb9faf7a617f8b546c6

  • SHA1

    f7cb3cdcb6c87f42d5db8ff19e7471f5730a1fac

  • SHA256

    09c4eb7f6e8a050eb2e7c4128fb6646ae8cd0c4c6b624276cc0c16cb223dcf12

  • SHA512

    928f1dcfb993a89c986b925095bfc8688459dbde8ea81b1cdff6705b0ebe7bd3aa784644144101b6c43971934003ff0283f59b14d356a6ed12f0a88fd37ecb1b

  • SSDEEP

    24576:O3xEEHH8YHQWlz4Ai5NB4ZAWH/O6Yd9V1YYgtXsh:d+8YHFz47XMAo/jw9ndB

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ļ޸\°汾鿴.exe
    "C:\Users\Admin\AppData\Local\Temp\ļ޸\°汾鿴.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:692

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/692-54-0x0000000000400000-0x00000000005EB000-memory.dmp

          Filesize

          1.9MB

        • memory/692-55-0x0000000075D51000-0x0000000075D53000-memory.dmp

          Filesize

          8KB

        • memory/692-56-0x0000000000400000-0x00000000005EB000-memory.dmp

          Filesize

          1.9MB

        • memory/692-57-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-58-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-59-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-60-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-62-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-61-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-63-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-64-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-65-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-67-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-66-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-68-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-69-0x0000000000401000-0x00000000004C7000-memory.dmp

          Filesize

          792KB

        • memory/692-70-0x0000000000400000-0x00000000005EB000-memory.dmp

          Filesize

          1.9MB