Analysis
-
max time kernel
93s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-es -
resource tags
-
submitted
27-03-2023 05:35
General
-
Target
SkyFlick2.1_WIN11/data/bin.exe
-
Size
5.3MB
-
MD5
5ee3604fac6e53dc2f3a4486ab9afcf6
-
SHA1
4a10abcd8ac6f75ee60d94eed5b07684a4e9117c
-
SHA256
318ee60258ac8cd34e0eed8d471fb0a11a3be56205cbb9d853dbded659f6c787
-
SHA512
bd28f9fb51f69c5a9926c3d2a60fa1888c70405a50ffd25586407857f792c2b373e5e04d78284f9c24a3151a296961c57f9dd2dd0dba4c4a1aab034d0b3bb8e0
-
SSDEEP
98304:17aA6O2V2/6K+yoHKEorpSFojMHa/0EexF2zAI8J5ktPCO0xtw2qHwJVtG:17aPO2c/6OoqjSFoE40E+fSWZqHwU
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SkyFlick2.1_WIN11\data\bin.exe"C:\Users\Admin\AppData\Local\Temp\SkyFlick2.1_WIN11\data\bin.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8.8MB