Analysis
-
max time kernel
86s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
15-02-2023 17:24
General
-
Target
AnkaBotPC_4.0.5/AnkaBotPC/AnkaBotProxy.exe
-
Size
5.9MB
-
MD5
70a69f99c9fd0ddcfc74dfc5dccaa2ba
-
SHA1
cd6429990749e475b171a3c60250764df4e3fdf0
-
SHA256
b3c9d86cbddc3080a47566c69ed251ea712c59e283c85995682ce18d50c06fbf
-
SHA512
8e7624a6c12aac2afe1a8886f85fd3292325ac2ff69f8f7c7fe3d54289b5d18ec3bfce7757dde7c4c6e3606cee81122c50cbb732a1ae297d64fd9649fef098b1
-
SSDEEP
98304:JrAgtjk3C6yCdkAPCFYehLzXFy40lT7Za3G89oovR4RB/+/vjPI6OCgNJPVvurLF:JkMAPC1F6ZkvHiH+/vzVOCg7VvaLF
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AnkaBotPC_4.0.5\AnkaBotPC\AnkaBotProxy.exe"C:\Users\Admin\AppData\Local\Temp\AnkaBotPC_4.0.5\AnkaBotPC\AnkaBotProxy.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/5056-132-0x0000000000400000-0x0000000000D30000-memory.dmpFilesize
9.2MB
-
memory/5056-135-0x0000000000400000-0x0000000000D30000-memory.dmpFilesize
9.2MB