Analysis

  • max time kernel
    122s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-03-2023 05:41

General

  • Target

    0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe

  • Size

    1.5MB

  • MD5

    2ed626e35ec451c64460382bec228089

  • SHA1

    8d5f66b8c328ff1eef098146ef65fa4cc2f7119d

  • SHA256

    0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7

  • SHA512

    3084fed70d0b0daee399d6e60e09a35d580485cbf264a56374211b3c24e5a491a9c24e46a704a19c0de641512212885fbad1283667024863486d881df6f86d71

  • SSDEEP

    24576:6WxQJhTL+k287vRwEZ8/1Uv+4rzZqTu4n1+LXaTTU9AjAllPY4fF37XkeOm3QH66:lcTykBjZutUv/4uHLKTT/IhkgQaQnY

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe
    "C:\Users\Admin\AppData\Local\Temp\0a8cdae571e6e3b847d5f929825e6f83a4dc0201bddd9d711cf4b460817942c7.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1988-133-0x0000000000400000-0x0000000000745000-memory.dmp

    Filesize

    3.3MB

  • memory/1988-134-0x0000000000400000-0x0000000000745000-memory.dmp

    Filesize

    3.3MB

  • memory/1988-136-0x0000000000400000-0x0000000000745000-memory.dmp

    Filesize

    3.3MB