Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
07-08-2023 16:34
Behavioral task
behavioral1
Sample
CryptoChecker v2.0.exe
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
CryptoChecker v2.0.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
CryptoChecker v2.0.exe
-
Size
2.2MB
-
MD5
cb2a517209c59c5740bd544c2a7392b4
-
SHA1
36a3da25bb5ba4a3320a14af66e663e99c3439be
-
SHA256
cf1b7176a9955b4f0ec37689abd0d3af8fd180e1cad3a9516ada1f81cdb57126
-
SHA512
5356b223473458f720fc52a06b88bf73e2a95ca3a3c63bcd98dca1c6a8a358af411cbbd331193b0254dc334196c2d91b8718108874de04801fb1adf611402b60
-
SSDEEP
49152:X5ZHDTQqCkJruTWE7++reV9aF7PGN5bCKtfQWFjB1:XvHCdTj71U9apPGzztoWhr
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4164-133-0x00007FF764EC0000-0x00007FF765456000-memory.dmp themida behavioral2/memory/4164-135-0x00007FF764EC0000-0x00007FF765456000-memory.dmp themida behavioral2/memory/4164-137-0x00007FF764EC0000-0x00007FF765456000-memory.dmp themida behavioral2/memory/4164-136-0x00007FF764EC0000-0x00007FF765456000-memory.dmp themida behavioral2/memory/4164-138-0x00007FF764EC0000-0x00007FF765456000-memory.dmp themida behavioral2/memory/4164-139-0x00007FF764EC0000-0x00007FF765456000-memory.dmp themida -
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4164 CryptoChecker v2.0.exe