Analysis
-
max time kernel
81s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 06:22
Static task
static1
Behavioral task
behavioral1
Sample
c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe
Resource
win10v2004-20220812-en
General
-
Target
c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe
-
Size
322KB
-
MD5
2be145f622550c205963354ff908ddcc
-
SHA1
1011f3914ad0fbdc1b800f5f08a1b45c42f28ed9
-
SHA256
c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca
-
SHA512
caf13be863e98a39caf2fc0427843338fe672ef273cd564d9473347052602da490761def4ec5772a937272fd2d14d255c77497bd03154dd8c16eeecc4bedcf72
-
SSDEEP
6144:wgggggkggzXvsSpWf7OL7DRAaXc9QE5hW8vInU9xr4Xt078lapYuzX3EyJMNoz6E:wgggggkgg7np4aDqasQE5U8vIU9xmmod
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 768 c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 768 c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe 768 c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe"C:\Users\Admin\AppData\Local\Temp\c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:768