Analysis

  • max time kernel
    81s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 06:22

General

  • Target

    c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe

  • Size

    322KB

  • MD5

    2be145f622550c205963354ff908ddcc

  • SHA1

    1011f3914ad0fbdc1b800f5f08a1b45c42f28ed9

  • SHA256

    c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca

  • SHA512

    caf13be863e98a39caf2fc0427843338fe672ef273cd564d9473347052602da490761def4ec5772a937272fd2d14d255c77497bd03154dd8c16eeecc4bedcf72

  • SSDEEP

    6144:wgggggkggzXvsSpWf7OL7DRAaXc9QE5hW8vInU9xr4Xt078lapYuzX3EyJMNoz6E:wgggggkgg7np4aDqasQE5U8vIU9xmmod

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe
    "C:\Users\Admin\AppData\Local\Temp\c62b62e229ba34f6aee8f813c5a81924d6f61bc050c2d25719b68e35e88afdca.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/768-132-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

  • memory/768-133-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

  • memory/768-136-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

  • memory/768-137-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB