Analysis
-
max time kernel
61s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
02/12/2022, 00:10
General
-
Target
3ab638faa7d125d66237d98c6f21346928bc3e029eac785480b540f567e67d5b.exe
-
Size
6.3MB
-
MD5
944246338b59f8cebc45970a08e9477a
-
SHA1
f3884034b958f64fd92a37f28d886b2aa0ceeb17
-
SHA256
3ab638faa7d125d66237d98c6f21346928bc3e029eac785480b540f567e67d5b
-
SHA512
f2b36a33f223fb1cc5cd504a32e8eac4291c1d3ea2a289a5b8bcde922269141024071bd7d6148c10359d9b66061768218869cf0b7dfc58a6ba79b2824890744a
-
SSDEEP
196608:deSXCQEZ1qu+KE9PNtqPYhmHYpxdUl3i1zwy6:ISXCQsihFfqwhMYrdUYNwy6
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ab638faa7d125d66237d98c6f21346928bc3e029eac785480b540f567e67d5b.exe"C:\Users\Admin\AppData\Local\Temp\3ab638faa7d125d66237d98c6f21346928bc3e029eac785480b540f567e67d5b.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
296KB
-
Filesize
576KB
-
Filesize
688KB
-
Filesize
284KB
-
Filesize
348KB
-
Filesize
36KB
-
Filesize
576KB
-
Filesize
244KB
-
Filesize
284KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
12.3MB
-
Filesize
1.4MB
-
Filesize
364KB
-
Filesize
32KB
-
Filesize
564KB
-
Filesize
576KB
-
Filesize
284KB
-
Filesize
5.7MB
-
Filesize
32KB