Analysis
-
max time kernel
305s -
max time network
400s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
25-11-2022 19:37
General
-
Target
HearthCrawler_R30_10/Hearthcrawler.exe
-
Size
897KB
-
MD5
b1957d42e692bde123f46c69bf5a8c07
-
SHA1
fc888e6553e2a7bef9cf875fb128abd4ce54b79d
-
SHA256
cf51afce6ebdadcf2546873479b49b00e1df8296c9ddcea1e52bb787eac4b596
-
SHA512
26652121c01bf0c32501dd481c96ea351e404eb2b3294299c0a35f59668a4d2f5c6356f4a3da971946ed96d555d56f531a9e58d51fd27c7b678596dc63a431f3
-
SSDEEP
24576:jgvnYTQmGhVekKcGQfOZhROydA/Fer49uPQJcDKwNgnnPd:jgQTQmeekKcfmZbAN7obHNQ
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HearthCrawler_R30_10\Hearthcrawler.exe"C:\Users\Admin\AppData\Local\Temp\HearthCrawler_R30_10\Hearthcrawler.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/360-54-0x0000000000400000-0x00000000004FC000-memory.dmpFilesize
1008KB
-
memory/360-55-0x0000000075441000-0x0000000075443000-memory.dmpFilesize
8KB
-
memory/360-56-0x0000000000400000-0x00000000004FC000-memory.dmpFilesize
1008KB
-
memory/360-58-0x0000000000400000-0x00000000004FC000-memory.dmpFilesize
1008KB
-
memory/360-57-0x0000000000400000-0x00000000004FC000-memory.dmpFilesize
1008KB
-
memory/360-59-0x0000000000400000-0x00000000004FC000-memory.dmpFilesize
1008KB
-
memory/360-60-0x0000000000400000-0x00000000004FC000-memory.dmpFilesize
1008KB