Analysis

  • max time kernel
    45s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    07-02-2023 06:41

General

  • Target

    6af0df98f542cf335601183c26779ac1becb0bbdccaf314ba0f0ee65ef63702e.exe

  • Size

    2.6MB

  • MD5

    f8f6ad8b9ac86a8962e67430ab72172e

  • SHA1

    beac7e280a08b72898e5c008a1e0c1b36999ae8a

  • SHA256

    6af0df98f542cf335601183c26779ac1becb0bbdccaf314ba0f0ee65ef63702e

  • SHA512

    7c1a8203a8b03e1aee9fc801d3c7d22213a47f95c3b70e54c85a7bc482f5e9aa754efdf601acd928522b22d36fb95684e917ccbff576d758f774b539f94c9c4a

  • SSDEEP

    49152:RVsH+LJWrMHPO7fF7C2/+wd9HT67h7JlLTuoCs+edgKrsvsNtCauLvLn4ikY+gbq:RVsHYJeAW7ppHW7BJlL1fdfosNtCdL4z

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6af0df98f542cf335601183c26779ac1becb0bbdccaf314ba0f0ee65ef63702e.exe
    "C:\Users\Admin\AppData\Local\Temp\6af0df98f542cf335601183c26779ac1becb0bbdccaf314ba0f0ee65ef63702e.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1036-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

    Filesize

    8KB

  • memory/1036-56-0x0000000076F30000-0x0000000076F77000-memory.dmp

    Filesize

    284KB

  • memory/1036-463-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-464-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-465-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-466-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-467-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-468-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-470-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-469-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-472-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-471-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-473-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-474-0x0000000000400000-0x0000000000F17000-memory.dmp

    Filesize

    11.1MB

  • memory/1036-475-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-476-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-477-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-479-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-478-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-480-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-481-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-482-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-483-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-484-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-485-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-486-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-487-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-491-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-494-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-495-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-493-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-496-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-492-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-497-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-490-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-498-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-499-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-489-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-488-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-500-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-501-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-502-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-503-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-504-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-505-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-506-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-507-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-508-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-509-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-510-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-511-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-513-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-515-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-516-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-518-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-519-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-517-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-514-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-512-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-520-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-521-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-522-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-523-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-524-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-525-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-1577-0x0000000002AD0000-0x0000000002BD0000-memory.dmp

    Filesize

    1024KB

  • memory/1036-1578-0x0000000002C10000-0x0000000002D91000-memory.dmp

    Filesize

    1.5MB

  • memory/1036-4675-0x0000000002EC0000-0x0000000002FD1000-memory.dmp

    Filesize

    1.1MB

  • memory/1036-4676-0x0000000000400000-0x0000000000F17000-memory.dmp

    Filesize

    11.1MB

  • memory/1036-4677-0x00000000029A0000-0x0000000002A41000-memory.dmp

    Filesize

    644KB

  • memory/1036-4678-0x0000000002AD0000-0x0000000002BD0000-memory.dmp

    Filesize

    1024KB

  • memory/1036-4679-0x0000000002DA0000-0x0000000002EA1000-memory.dmp

    Filesize

    1.0MB

  • memory/1036-4680-0x0000000000400000-0x0000000000F17000-memory.dmp

    Filesize

    11.1MB