Analysis

  • max time kernel
    91s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2023, 19:44

General

  • Target

    0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8.exe

  • Size

    1.1MB

  • MD5

    42c3562ebeecb085a01993322f32439c

  • SHA1

    bbc8d001fde9e44ea55fb39fc7bbe7f564d67f06

  • SHA256

    0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8

  • SHA512

    eaf6c9e522decb8a6aa100ef4178c9885cebebf21870c3ad85ba19775111edfadb735102765b1dcf003a0b8675ec09dea1f952e0b222c7624e9cfa2a4c98d2f5

  • SSDEEP

    24576:kxqCEuUwg4L5u84nKjpxRBMxdaeBJIcdmSQUxhNLWkXLMYAK30Xc:kxREhwRY8njnHMxda2pDZuXc

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8.exe
    "C:\Users\Admin\AppData\Local\Temp\0893d101dd0cd0d71a66218d8d590df0d2b76ed9ac776c1cbe050da5266a06d8.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:3868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3868-132-0x0000000000400000-0x0000000000512000-memory.dmp

    Filesize

    1.1MB

  • memory/3868-133-0x0000000077000000-0x00000000771A3000-memory.dmp

    Filesize

    1.6MB

  • memory/3868-134-0x00000000751A0000-0x00000000753B5000-memory.dmp

    Filesize

    2.1MB

  • memory/3868-136-0x0000000076880000-0x0000000076A20000-memory.dmp

    Filesize

    1.6MB

  • memory/3868-137-0x0000000074EC0000-0x0000000074F3A000-memory.dmp

    Filesize

    488KB

  • memory/3868-1479-0x0000000002650000-0x0000000002750000-memory.dmp

    Filesize

    1024KB

  • memory/3868-1480-0x0000000000400000-0x0000000000512000-memory.dmp

    Filesize

    1.1MB