Analysis

  • max time kernel
    81s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    05/12/2022, 07:33

General

  • Target

    fa61a88505e5dc71e4d5fc9b434bb080380f3e64cd3506a9f8afa0979b2ed780.exe

  • Size

    1.2MB

  • MD5

    8115e24be5b5f82c0b828160f3a4ef31

  • SHA1

    4c6c9957a6a208f86e125cbc2924033b7e6dc7ba

  • SHA256

    fa61a88505e5dc71e4d5fc9b434bb080380f3e64cd3506a9f8afa0979b2ed780

  • SHA512

    2aa04bdda216f089ea65aad808480241d1207d1b61a90c46cc1826537650557a0b180f7ce440be634f9e5d29d0f0337394a8342115fd71f546063c88e1f3ee64

  • SSDEEP

    12288:/PKTH7wB3Ugez/lBdsTZVt5B4MT0FF9d0xoaAGC8AWVI5yTQDwFQju2UZL6vODT6:/PKTbwBC9sTZVN4p5kQG0dVlIJmjokom

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 11 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fa61a88505e5dc71e4d5fc9b434bb080380f3e64cd3506a9f8afa0979b2ed780.exe
    "C:\Users\Admin\AppData\Local\Temp\fa61a88505e5dc71e4d5fc9b434bb080380f3e64cd3506a9f8afa0979b2ed780.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:1536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1536-54-0x0000000075CF1000-0x0000000075CF3000-memory.dmp

    Filesize

    8KB

  • memory/1536-56-0x0000000076940000-0x0000000076987000-memory.dmp

    Filesize

    284KB

  • memory/1536-462-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-463-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-464-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-465-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-466-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-468-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-467-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-469-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-471-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-470-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-472-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-473-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-474-0x0000000000400000-0x000000000052C000-memory.dmp

    Filesize

    1.2MB

  • memory/1536-476-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-475-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-477-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-478-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-479-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-480-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-481-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-482-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-483-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-484-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-485-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-486-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-487-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-488-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-489-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-491-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-490-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-492-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-493-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-494-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-495-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-496-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-497-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-498-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-499-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-500-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-501-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-502-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-504-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-503-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-505-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-506-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-507-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-508-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-509-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-510-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-511-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-512-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-513-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-514-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-515-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-516-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-517-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-518-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-519-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-520-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-521-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-522-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-523-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-524-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-1352-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-1353-0x0000000002890000-0x0000000002A11000-memory.dmp

    Filesize

    1.5MB

  • memory/1536-3978-0x0000000002580000-0x0000000002680000-memory.dmp

    Filesize

    1024KB

  • memory/1536-4436-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB

  • memory/1536-5275-0x0000000002B40000-0x0000000002C41000-memory.dmp

    Filesize

    1.0MB

  • memory/1536-5278-0x0000000000400000-0x000000000052C000-memory.dmp

    Filesize

    1.2MB

  • memory/1536-5279-0x0000000002A20000-0x0000000002B31000-memory.dmp

    Filesize

    1.1MB