Overview

overview

5

Static

static

fccb2cb939...9b.exe

windows7-x64

5

fccb2cb939...9b.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    80s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 15:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    fccb2cb939c5b1bcb431e6f70b7d8e3d3f046761b9ab3f28b056cad68236859b.exe

  • Size

    770KB

  • MD5

    43b6cc1d0a8b339b318ead4ae35b6622

  • SHA1

    43df044068624bb2363c91ad57232278eb2e0f9b

  • SHA256

    fccb2cb939c5b1bcb431e6f70b7d8e3d3f046761b9ab3f28b056cad68236859b

  • SHA512

    12cb6c616c30ceb4a994c3ea88b96a218d0d185f2cf859b9529e6886358a854b53a6c6d3fa194737bd96b2e150f467ab84bfb5dfa01603de38905213b08d03d4

  • SSDEEP

    24576:r7j4cWHIxd5iPhWFhzHYgoqHQgouZVJhDj0+MjTPLo:745HIn5wAFt4gWgpjJhPynL

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fccb2cb939c5b1bcb431e6f70b7d8e3d3f046761b9ab3f28b056cad68236859b.exe
    "C:\Users\Admin\AppData\Local\Temp\fccb2cb939c5b1bcb431e6f70b7d8e3d3f046761b9ab3f28b056cad68236859b.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of AdjustPrivilegeToken
    PID:2308

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2308-132-0x0000000000400000-0x00000000005B9000-memory.dmp

          Filesize

          1.7MB

          Download