Analysis
-
max time kernel
332s -
max time network
463s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
29/11/2022, 15:42
General
-
Target
5d354bd444f3c229e99070793f67c76fb97e8a47e79256c9187dc436492019f6.exe
-
Size
1.5MB
-
MD5
f0572bad2fdd3a14656941971f13d947
-
SHA1
fb7f534bbf79e86f238aa18ea7a788f7c14d30a7
-
SHA256
5d354bd444f3c229e99070793f67c76fb97e8a47e79256c9187dc436492019f6
-
SHA512
7609f4fc5759e584e8e1ebb90ea77d3f3e295b9038dba51f037a4c684f3ed7a1f90e4f176882b4fde2a233f6c2cb11041698ab4a75f45bef68d7ad7369df4557
-
SSDEEP
24576:cwYbrMZLNuobtAaRDIcm+Em8MZB6F2mdaJkzklByxODvlwUSySvhmVchBpCo:dYsbtAmDDZEFMNAklo+vlwUbSvhmIp5
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 55 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d354bd444f3c229e99070793f67c76fb97e8a47e79256c9187dc436492019f6.exe"C:\Users\Admin\AppData\Local\Temp\5d354bd444f3c229e99070793f67c76fb97e8a47e79256c9187dc436492019f6.exe"1⤵
- Checks BIOS information in registry
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024B
MD512871388b682b159ddd85545302a289d
SHA176b47377da188fcfddeefa0f940287f1cce9885d
SHA256cc033f00e96cae1829e3a5c15150fe68a62f65440f1b158d9257370fbc488a9b
SHA512d60953b62d08e52fa2860db257e2bdbaa97e7eff7007617857f7b30a76f7c7ba81f8444d313a6ad496adbbaede5af1661e72522046789bb9aee1340f7ac12c7d
-
Filesize
480KB
-
Filesize
204KB
-
Filesize
964KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
488KB
-
Filesize
1.5MB
-
Filesize
2.1MB
-
Filesize
964KB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1.5MB