Analysis
-
max time kernel
92s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 19:11
Static task
static1
Behavioral task
behavioral1
Sample
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe
Resource
win10v2004-20220812-en
General
-
Target
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe
-
Size
236KB
-
MD5
e0f7c81e7892dede334e98f545f4e9b2
-
SHA1
6a8a5b4c5d11ecb8881189742f921c984e98d990
-
SHA256
ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04
-
SHA512
fabac9deb7b90f246dd93c56a0da6eebbde84b6334bff1abc028779bc1cf44cb3f551416ff13f8affe0ad9334adde82adfe4fd11a21e077dc820a5ac7a0dbdd3
-
SSDEEP
3072:lDCRHaYBpu/3QTqqjeEO8Wj1cVx4U1oCrKVIklPh5QcU3KQz:5C1u/AGqqROvFqqWIsPA
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1944 ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe 1944 ef95c05788bbba32025276db3ff7f539b41e744448c13e0af8a77d16f4136c04.exe