Analysis
-
max time kernel
30s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
20-03-2023 14:34
Static task
static1
Behavioral task
behavioral1
Sample
ghxkehgertedtyp.c.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ghxkehgertedtyp.c.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
ghxkehgertedtyp.c.exe
-
Size
7.5MB
-
MD5
f5d957a42f578847664cacb8a4c3d695
-
SHA1
5affbea912936570480b7a6a0a7e67c6a2f62ec9
-
SHA256
00978d16ecc2b0f6cf039b3bef087a8542d2092d8f95f36104f2329f7bf362dc
-
SHA512
07821df782858665c810e959e92f78de4af56e8d090069c5637537338244f9348f7a878bff95d72620b4c092fd97cfb2d15ffe1c097c36a86399a478ea406980
-
SSDEEP
196608:ZOtzW0BrGc/4GmLcBh8YSZIEqsyZr2caC78:kVW6Gc//B/xEh+a
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1080 ghxkehgertedtyp.c.exe 1080 ghxkehgertedtyp.c.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1080 ghxkehgertedtyp.c.exe