2b586e52068589cc3370e8b855f1f0e7a9682af1f0f03bd8342e09bd71463432

Analysis

max time kernel
54s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
06/06/2023, 01:04

Target

Netlix.exe
Size

5.7MB
MD5

d74f43d5a83829c38771a329d69a7502
SHA1

2c99b799c4ac4e3bd77e83316a36276137ce3e57
SHA256

2b586e52068589cc3370e8b855f1f0e7a9682af1f0f03bd8342e09bd71463432
SHA512

cb23a40df7f109121db5f5b783e44b4d597ffc54e9e4a5657c57091a0f8a838c23b8dbf9d9d7a9a26e8f89269f48efc3c5009d32f13ace7da3b4097b5039fb40
SSDEEP

98304:+IY8rAkZKXYK7X5T0icaIH8tkKTk6PxLpNhQc8guoiq5KDTnKnJ:L717MpBRhTk6pLpMEuoGT

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2004	Netlix.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2004	Netlix.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2004 wrote to memory of 828	2004	Netlix.exe	29
PID 2004 wrote to memory of 828	2004	Netlix.exe	29
PID 2004 wrote to memory of 828	2004	Netlix.exe	29

C:\Users\Admin\AppData\Local\Temp\Netlix.exe
"C:\Users\Admin\AppData\Local\Temp\Netlix.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2004
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:828

memory/2004-54-0x00000000773C0000-0x00000000773C2000-memory.dmp

Filesize
8KB

Download
memory/2004-55-0x00000000773C0000-0x00000000773C2000-memory.dmp

Filesize
8KB

Download
memory/2004-56-0x00000000773C0000-0x00000000773C2000-memory.dmp

Filesize
8KB

Download
memory/2004-57-0x00000000773D0000-0x00000000773D2000-memory.dmp

Filesize
8KB

Download
memory/2004-58-0x00000000773D0000-0x00000000773D2000-memory.dmp

Filesize
8KB

Download
memory/2004-59-0x00000000773D0000-0x00000000773D2000-memory.dmp

Filesize
8KB

Download
memory/2004-60-0x000000013F0A0000-0x000000013FA3D000-memory.dmp

Filesize
9.6MB

Download