Analysis
-
max time kernel
225s -
max time network
280s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
15/01/2023, 19:24
Static task
static1
Behavioral task
behavioral1
Sample
4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe
-
Size
1.5MB
-
MD5
be30615738e99014bf6165900a2443fc
-
SHA1
c1c7078bd95b844535bbe8f898bb78ca8e63ce72
-
SHA256
4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e
-
SHA512
7b10bc13d8c061fbe36234be7e8689dd440bf110f362171d31d739bdb1887d816bbf50d6d56d6af9cf3ae2bd0832934367fd11cc99183d02a63cd4573d2257be
-
SSDEEP
49152:dh8aF7kw66QD3Md3otGPDWSm41yq0Wtftjg:3F7EX3M9hHJftjg
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 9 IoCs
pid Process 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe 2636 4ebb8cca218b70877c317f504ccaaa6067637037fdea6861563fe153ecbcfd8e.exe