Analysis

  • max time kernel
    43s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2023, 19:44

General

  • Target

    0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8.exe

  • Size

    1.1MB

  • MD5

    42c3562ebeecb085a01993322f32439c

  • SHA1

    bbc8d001fde9e44ea55fb39fc7bbe7f564d67f06

  • SHA256

    0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8

  • SHA512

    eaf6c9e522decb8a6aa100ef4178c9885cebebf21870c3ad85ba19775111edfadb735102765b1dcf003a0b8675ec09dea1f952e0b222c7624e9cfa2a4c98d2f5

  • SSDEEP

    24576:kxqCEuUwg4L5u84nKjpxRBMxdaeBJIcdmSQUxhNLWkXLMYAK30Xc:kxREhwRY8njnHMxda2pDZuXc

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8.exe
    "C:\Users\Admin\AppData\Local\Temp\0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1948-54-0x00000000764D1000-0x00000000764D3000-memory.dmp

    Filesize

    8KB

  • memory/1948-56-0x0000000075290000-0x00000000752D7000-memory.dmp

    Filesize

    284KB

  • memory/1948-462-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-463-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-464-0x0000000000400000-0x0000000000512000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-465-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-466-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-467-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-468-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-469-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-470-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-471-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-472-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-473-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-475-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-474-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-476-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-477-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-478-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-479-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-480-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-482-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-481-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-483-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-484-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-485-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-486-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-487-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-489-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-488-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-491-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-490-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-492-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-493-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-494-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-495-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-496-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-497-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-498-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-499-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-500-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-501-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-502-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-503-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-504-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-505-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-506-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-507-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-508-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-509-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-510-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-511-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-512-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-513-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-514-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-515-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-516-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-517-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-518-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-519-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-520-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-521-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-522-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-523-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-524-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-1408-0x0000000001D40000-0x0000000001E40000-memory.dmp

    Filesize

    1024KB

  • memory/1948-1410-0x0000000001FD0000-0x0000000002151000-memory.dmp

    Filesize

    1.5MB

  • memory/1948-4811-0x0000000002160000-0x0000000002271000-memory.dmp

    Filesize

    1.1MB

  • memory/1948-4812-0x0000000002390000-0x0000000002431000-memory.dmp

    Filesize

    644KB

  • memory/1948-4813-0x0000000002280000-0x0000000002381000-memory.dmp

    Filesize

    1.0MB

  • memory/1948-4814-0x0000000000400000-0x0000000000512000-memory.dmp

    Filesize

    1.1MB