e2c9082996f577f3950870f67a74a5077fade13d7e73c7831115189837429cf3 | Triage

Analysis

max time kernel
27s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
04/01/2023, 14:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cracked_rust.exe
Size

18.4MB
MD5

56e7a56b0c107e646b3c9daa762b41f6
SHA1

45c01380dbff635a6ebbd7c6f73fc101193d2156
SHA256

e2c9082996f577f3950870f67a74a5077fade13d7e73c7831115189837429cf3
SHA512

39f9be97bddff5175156020afff003a1193b3c213c2b44e2d7a647556f2d1829fb8454c35781632fc80dca79f9f788a1848adb289aa0c4f83c6077115683cec0
SSDEEP

393216:T2EYQ6yLwMTqZmiV3YTgzDJWmtrB2eWsTUVCgzo6isV6QleCD4X:J6uKm8YTiD3t4ITEKb+C

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
1528	cracked_rust.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1528	cracked_rust.exe

C:\Users\Admin\AppData\Local\Temp\cracked_rust.exe
"C:\Users\Admin\AppData\Local\Temp\cracked_rust.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:1528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1528-54-0x000000013F7F0000-0x0000000141C2F000-memory.dmp

Filesize
36.2MB

Download
memory/1528-58-0x000000013F7F0000-0x0000000141C2F000-memory.dmp

Filesize
36.2MB

Download