Analysis

  • max time kernel
    157s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-12-2022 14:14

General

  • Target

    5e2c8eb8c2fc08c5ea815b94458bdb0c078f8e8b2b9b9c7eca710fe050da197d.exe

  • Size

    2.5MB

  • MD5

    211e7e63f4c776980336f863658a0f2b

  • SHA1

    8221de8b90b7770598ac9414b25975be47279f75

  • SHA256

    5e2c8eb8c2fc08c5ea815b94458bdb0c078f8e8b2b9b9c7eca710fe050da197d

  • SHA512

    34773f5bedd085c649742fb48ed63391d5c4c9fec5cd69f0976e1b91923528a1d1059b1a5161005d94a6dd53a93fb65bd53f95324735c07d5849e7b283ebadd6

  • SSDEEP

    49152:cGjqabn5asY6DwOBfrnvV7UeWtlOCZJkYgUCZE/:cGWaDYiwOBpIeWr5+Yg/U

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e2c8eb8c2fc08c5ea815b94458bdb0c078f8e8b2b9b9c7eca710fe050da197d.exe
    "C:\Users\Admin\AppData\Local\Temp\5e2c8eb8c2fc08c5ea815b94458bdb0c078f8e8b2b9b9c7eca710fe050da197d.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1648-132-0x00000000005D0000-0x000000000064C000-memory.dmp

    Filesize

    496KB

  • memory/1648-133-0x00000000005D0000-0x000000000064C000-memory.dmp

    Filesize

    496KB

  • memory/1648-134-0x0000000002AF0000-0x0000000002B2D000-memory.dmp

    Filesize

    244KB