Analysis
-
max time kernel
63s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
14/04/2023, 20:45
General
-
Target
7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37.exe
-
Size
2.4MB
-
MD5
2e3ac1140254a256fd4e34768cb67a6e
-
SHA1
1fc2a98fa4d61dc8639a30382a92c10782f0e7f2
-
SHA256
7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37
-
SHA512
225c4e4057a3115c473fd7b76802349bc4dafcd4fb7ed42e4eaf8b650c9b5f5b8fa04d9a54113991923d1c84b5513ef6fa201400e6dfb925122a507482dc34a3
-
SSDEEP
49152:flYLIm/LsNN/KSr4vFCyLjTRwulp4/IJg8yn6Uc9V+szVO:d+GDr4vF9HpdUggsU
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
AutoIT Executable 2 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 19 IoCs
-
Enumerates system info in registry 2 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37.exe"C:\Users\Admin\AppData\Local\Temp\7e306110ec9c01320b2356d94010ed581e77b6014d80aacba441b4bd09ec7e37.exe"1⤵
- Checks BIOS information in registry
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
3.0MB