Overview

overview

5

Static

static

8a5018b67b...0f.exe

windows7-x64

5

8a5018b67b...0f.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    154s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    25-11-2022 19:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f.exe

  • Size

    2.1MB

  • MD5

    50eb36fd9bdf3697e177550ed2621e3e

  • SHA1

    c63fe83cda2a808347693abd91a86011d030a372

  • SHA256

    8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f

  • SHA512

    1f2714d8d778d423f8a49807edaabf60f6b30d60ae7efaa3e6855a5a5db0a06911d45820bd754acfde5f26af0972c7a1b4349a41d1102cf4916eeb349ae5a357

  • SSDEEP

    49152:OI7rilY9oyqvqu7M1f+Yj3US495gdpYMwhQ5N9Q/ZHH7AXEawXNHVHX9GHHM6uHY:pvilvlvh7odpSy/jwhG1

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 53 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f.exe
    "C:\Users\Admin\AppData\Local\Temp\8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2028-54-0x00000000753F1000-0x00000000753F3000-memory.dmp
    Filesize

    8KB

    Download
  • memory/2028-55-0x0000000000400000-0x0000000000763000-memory.dmp
    Filesize

    3.4MB

    Download
  • memory/2028-57-0x0000000076960000-0x00000000769A7000-memory.dmp
    Filesize

    284KB

    Download
  • memory/2028-464-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-463-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-467-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-468-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-466-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-465-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-472-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-473-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-471-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-470-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-469-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-476-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-477-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-475-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-474-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-480-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-479-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-478-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-484-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-485-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-483-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-482-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-481-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-489-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-490-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-488-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-487-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-486-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-493-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-492-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-491-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-496-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-497-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-495-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-494-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-499-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-498-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-501-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-500-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-502-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-503-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-505-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-504-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-511-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-524-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-523-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-522-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-521-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-520-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-519-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-518-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-517-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-516-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-515-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-514-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-513-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-512-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-510-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-509-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-508-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-506-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-507-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-1331-0x00000000020E0000-0x00000000021E0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/2028-1332-0x0000000002270000-0x00000000023F1000-memory.dmp
    Filesize

    1.5MB

    Download
  • memory/2028-3732-0x00000000020E0000-0x00000000021E0000-memory.dmp
    Filesize

    1024KB

    Download
  • memory/2028-4611-0x0000000002590000-0x00000000026A1000-memory.dmp
    Filesize

    1.1MB

    Download
  • memory/2028-4618-0x0000000000400000-0x0000000000763000-memory.dmp
    Filesize

    3.4MB

    Download
  • memory/2028-4619-0x0000000002470000-0x0000000002571000-memory.dmp
    Filesize

    1.0MB

    Download
  • memory/2028-4620-0x0000000000400000-0x0000000000763000-memory.dmp
    Filesize

    3.4MB

    Download
  • memory/2028-4621-0x0000000000400000-0x0000000000763000-memory.dmp
    Filesize

    3.4MB

    Download