Analysis
-
max time kernel
378s -
max time network
413s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 14:28
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Ѫͳ1.1 .exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
Ѫͳ1.1 .exe
Resource
win10v2004-20221111-en
General
-
Target
Ѫͳ1.1 .exe
-
Size
2.3MB
-
MD5
7258d5fd3bab7e9802b93573819261eb
-
SHA1
04beccacb05c553cb4debd377bc43403862e2b9a
-
SHA256
f96ae6955319db901b55aa276508d1ad6e5ac3fee50daf93993a2efff19104e2
-
SHA512
cd3f2e8da8e6f4b6270723075f9f2116b90fc5e5188ffa6aa4856b4cb5642a4d45f2370374c4c628f0dd0a17fce9aec3a23369d7232487ac62750725ed85a971
-
SSDEEP
49152:5bNNjlTAj0pkfuxLkbXMU9bmk3cMjlG91Fyc:HN9Akkfue4O3BSF
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
Processes:
Ѫͳ1.1 .exepid process 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe 428 Ѫͳ1.1 .exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
Ѫͳ1.1 .exepid process 428 Ѫͳ1.1 .exe