Analysis
-
max time kernel
122s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
05-03-2023 05:41
Static task
static1
Behavioral task
behavioral1
Sample
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe
Resource
win10v2004-20230220-en
General
-
Target
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe
-
Size
1.5MB
-
MD5
2ed626e35ec451c64460382bec228089
-
SHA1
8d5f66b8c328ff1eef098146ef65fa4cc2f7119d
-
SHA256
0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7
-
SHA512
3084fed70d0b0daee399d6e60e09a35d580485cbf264a56374211b3c24e5a491a9c24e46a704a19c0de641512212885fbad1283667024863486d881df6f86d71
-
SSDEEP
24576:6WxQJhTL+k287vRwEZ8/1Uv+4rzZqTu4n1+LXaTTU9AjAllPY4fF37XkeOm3QH66:lcTykBjZutUv/4uHLKTT/IhkgQaQnY
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1988 0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe