Analysis
-
max time kernel
158s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 23:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bfd1dad193b0dab4f36b3a3021dcc5b9.exe
Resource
win7-20230220-en
windows7-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
bfd1dad193b0dab4f36b3a3021dcc5b9.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bfd1dad193b0dab4f36b3a3021dcc5b9.exe
-
Size
6.6MB
-
MD5
bfd1dad193b0dab4f36b3a3021dcc5b9
-
SHA1
1030f8303d36b4be1004cf5848b54bfb6d84fa52
-
SHA256
577008901c87ac135164e22a9dd8d9467c1d92ef2288157c95be49571a93be95
-
SHA512
dafc0fd4a2fd0e8ee62e644eca73af35a56ed70549e98d7e9d329d89dd12bb81a9e4ef747b81d4a2d41eeb1a72f17fa0086b8e454f4e7c4c423a7dd3a7fa41b7
-
SSDEEP
98304:cq6rgZZ0WMY+gPeFy0OvJv4JTfdnwuFE9HdvzxCCExUs10NhfgYCjcZ:+qZ+YWy0OVuRnwuFKBxCrUs0hIYCw
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 2028 bfd1dad193b0dab4f36b3a3021dcc5b9.exe 2028 bfd1dad193b0dab4f36b3a3021dcc5b9.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2028 bfd1dad193b0dab4f36b3a3021dcc5b9.exe 2028 bfd1dad193b0dab4f36b3a3021dcc5b9.exe