Analysis

  • max time kernel
    150s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2023 09:41

General

  • Target

    25000.exe

  • Size

    1.3MB

  • MD5

    4386706f14a77b47736e5e487e515861

  • SHA1

    4c7feb1c9f69a9fb4bd2b3cf7041fd7e840bf7a6

  • SHA256

    e0dd242ccbf9b60c4c801534e43478e6acd4d691f3330528326bc3470aaac7bd

  • SHA512

    efb8027cc07237beb926b5dca09d524a0658ff0b4633f866bbe1410af57a5e9383fa54f3b1ec4adc13edfd446630686fbebeb14ebf0099d9357ca9c8ba0937aa

  • SSDEEP

    24576:0pC8mUD6c7FFRIqZerzVhSpgyCGbkW9poKaVXDcq9:h8N7FFOSK+YWpbaRDv

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 27 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\25000.exe
    "C:\Users\Admin\AppData\Local\Temp\25000.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1048-54-0x00000000754A0000-0x00000000754E7000-memory.dmp
    Filesize

    284KB

  • memory/1048-248-0x0000000000400000-0x00000000005BA000-memory.dmp
    Filesize

    1.7MB

  • memory/1048-461-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-462-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-463-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-464-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-465-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-466-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-468-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-467-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-469-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-470-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-471-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-472-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-473-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-474-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-475-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-476-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-477-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-478-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-479-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-480-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-481-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-482-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-483-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-484-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-485-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-486-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-487-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-488-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-489-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-490-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-492-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-491-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-493-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-495-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-494-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-497-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-496-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-498-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-499-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-500-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-501-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-502-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-503-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-504-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-505-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-506-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-507-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-508-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-509-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-510-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-511-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-512-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-513-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-514-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-515-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-516-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-517-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-519-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-520-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-518-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-521-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-522-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-523-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-1333-0x0000000001FA0000-0x00000000020A0000-memory.dmp
    Filesize

    1024KB

  • memory/1048-1334-0x0000000002140000-0x00000000022C1000-memory.dmp
    Filesize

    1.5MB

  • memory/1048-4270-0x0000000001FA0000-0x00000000020A0000-memory.dmp
    Filesize

    1024KB

  • memory/1048-4810-0x00000000023F0000-0x0000000002501000-memory.dmp
    Filesize

    1.1MB

  • memory/1048-4811-0x0000000002510000-0x0000000002611000-memory.dmp
    Filesize

    1.0MB

  • memory/1048-4812-0x00000000022D0000-0x0000000002371000-memory.dmp
    Filesize

    644KB

  • memory/1048-4822-0x0000000000400000-0x00000000005BA000-memory.dmp
    Filesize

    1.7MB