Analysis
-
max time kernel
151s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
02-06-2023 02:30
General
-
Target
ca0053d39da351551077957801cec0ca.exe
-
Size
19.4MB
-
MD5
ca0053d39da351551077957801cec0ca
-
SHA1
cb56c91db8dd290785272148d561f2ef49ad9a78
-
SHA256
9953314f79bffb5e2f6af609250687e372e175cafcc66cab70b1689110231ab4
-
SHA512
effc8316937e41546c0acb786f6615d5845be8ebd1b098c5a1770026968e5a6eb9f07d001453bc9431768f06fbde6ff538b92aee9c1026da6bdf8e3c89e87afa
-
SSDEEP
393216:pnwUCGCpyIe21PeXYORfkOXrgOJ4gOcl0ICyhY3NClBla:1wUCZWyuYChbbJJO9l3KP
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca0053d39da351551077957801cec0ca.exe"C:\Users\Admin\AppData\Local\Temp\ca0053d39da351551077957801cec0ca.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
627B
MD53df2867dd949982d322ef0a51697b0dc
SHA159bd07aa10e2b746a77280cd0e19d592faacefa0
SHA256760534c29580ca8dc412e8088285223f1dcbc2f490b9e899ffa493b7933e3c7f
SHA512475d9061a75bf02efc2160540cff465c243df81d85e90415ac89e7379f4de79946f5d64ffbc5a4d89cb32b7834fa4e5308ccd4f95c9a13522e09223d99556011
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
40.3MB