Overview

overview

10

Static

static

dd6b0783df...f8.exe

windows7-x64

10

dd6b0783df...f8.exe

windows10-2004-x64

5

Resubmissions

29-11-2022 17:41

221129-v9vqgsbb47 10

08-09-2022 23:04

220908-22fpxsdbdn 10

Analysis

  • max time kernel
    184s
  • max time network
    194s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 17:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dd6b0783dfd0ce4ff0d8a3f9fec6be4238ea99eef46d6000dbe04cb3c1d83ff8.exe

  • Size

    8.2MB

  • MD5

    c50570558f1fa95225c72ac974eb631a

  • SHA1

    caf2081be16dd9738ae06e85b8464bbeaac1fef0

  • SHA256

    dd6b0783dfd0ce4ff0d8a3f9fec6be4238ea99eef46d6000dbe04cb3c1d83ff8

  • SHA512

    e159c2f1c99a87c3aa47152edcd19145fec8b6fd06b3f65410487d0d7ba0b00b8e0fc1f2d4fdb26c9d425e1c2a216f7eb206f2d2086d100aa635b6102b894545

  • SSDEEP

    196608:MS1SCw5ygwmaNPYL0q9aIeJhYDD8QWKaQ/s6HVf32gGgvHT4xt40aOgv:11SCw5umaetaIwYDIXQzf32sHTqt4j

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd6b0783dfd0ce4ff0d8a3f9fec6be4238ea99eef46d6000dbe04cb3c1d83ff8.exe
    "C:\Users\Admin\AppData\Local\Temp\dd6b0783dfd0ce4ff0d8a3f9fec6be4238ea99eef46d6000dbe04cb3c1d83ff8.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:3328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3328-132-0x0000000000EE0000-0x0000000001CA1000-memory.dmp
    Filesize

    13.8MB

    Download
  • memory/3328-134-0x0000000000EE0000-0x0000000001CA1000-memory.dmp
    Filesize

    13.8MB

    Download
  • memory/3328-135-0x00000000037F5000-0x0000000003D8E000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/3328-136-0x0000000000EE0000-0x0000000001CA1000-memory.dmp
    Filesize

    13.8MB

    Download
  • memory/3328-137-0x0000000003D90000-0x0000000003EF1000-memory.dmp
    Filesize

    1.4MB

    Download
  • memory/3328-138-0x00000000037F5000-0x0000000003D8E000-memory.dmp
    Filesize

    5.6MB

    Download