Analysis
-
max time kernel
151s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
01-12-2022 05:00
General
-
Target
57b8b23f49955ea7c0c8ca280b0171a46b54ae730d59d22880aacf9df68ffee7.exe
-
Size
128KB
-
MD5
12f492984db7e075fc3a4aebd35567a0
-
SHA1
ebbf2f78143de0d483113d91f83e46c2c8f9369d
-
SHA256
57b8b23f49955ea7c0c8ca280b0171a46b54ae730d59d22880aacf9df68ffee7
-
SHA512
5553f25da338bef1bb6679888cd856f47b3b3ecca31ef16a780feb9d9d4e84c3b623f099ecc534c0e4b5be6d6105f1bc74147c3d01e42b626afd42c9dcf1010d
-
SSDEEP
3072:c392kaPn8/wf3R6wZg2CEZyxeEqtOoecMqTxLbz:couQBS5EZyxnefeFq
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: MapViewOfSection 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\57b8b23f49955ea7c0c8ca280b0171a46b54ae730d59d22880aacf9df68ffee7.exe"C:\Users\Admin\AppData\Local\Temp\57b8b23f49955ea7c0c8ca280b0171a46b54ae730d59d22880aacf9df68ffee7.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: MapViewOfSection
-
C:\Windows\syswow64\svchost.exe"C:\Windows\syswow64\svchost.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
28KB
-
Filesize
8KB
-
Filesize
16.3MB
-
Filesize
16.3MB
-
Filesize
16.3MB