2b7d3e9109bac3f1952fa9012c7dd035a0595938e6fce76b43a4cd89428420b0

Analysis

max time kernel
79s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
09-03-2023 07:48

Target

22e2b816a20424bb37abf9cfc22605709173aa4208b9e383fe10266469b2f916.100-200.exe
Size

137.3MB
MD5

88341ee67f6b68052a0b14d08514a327
SHA1

0bd9314eff23f8f23dce4982a27083201e4b3749
SHA256

d9e593a54ccd9e655ac2acbcbd786a8a89cbcf20310734428b2e5abc6a8a34a2
SHA512

598f6dd92a95009dfdcba5ecad16bf0ef07082a81038ac934630a38fccf6369f44368112dccc6fa43238ce504683764b6b7057457d1fe2b17282903b6fc9dfa8
SSDEEP

393216:SccC5cYkegfafcwvHgApo65UQea5MCjQXowha8xPg:VcPdegfalY4oAJdc4mNg

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2460	22e2b816a20424bb37abf9cfc22605709173aa4208b9e383fe10266469b2f916.100-200.exe

C:\Users\Admin\AppData\Local\Temp\22e2b816a20424bb37abf9cfc22605709173aa4208b9e383fe10266469b2f916.100-200.exe
"C:\Users\Admin\AppData\Local\Temp\22e2b816a20424bb37abf9cfc22605709173aa4208b9e383fe10266469b2f916.100-200.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2460