Analysis
-
max time kernel
125s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
20/08/2023, 21:13
General
-
Target
200851efe30f25f98dac87d61670df9833d51378205c0a809d6268116426956e.exe
-
Size
14.7MB
-
MD5
dad2282d9dcbf0142052986f359562ac
-
SHA1
03c27a32e5530af0a65d8316db6a36498d90e811
-
SHA256
200851efe30f25f98dac87d61670df9833d51378205c0a809d6268116426956e
-
SHA512
55e93d618e105c1dfa25aa75b371ef7eaf13c42935019b80131788c94ac9d3fdd12b56118a560e8d43b5c7d1f96a07c02521fd64bbc642842096bf07e8251f39
-
SSDEEP
393216:5NHko1ybV8W1Ck7BuKkhRo+yd7mNhvEm:5uowkk70Kw9T
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\200851efe30f25f98dac87d61670df9833d51378205c0a809d6268116426956e.exe"C:\Users\Admin\AppData\Local\Temp\200851efe30f25f98dac87d61670df9833d51378205c0a809d6268116426956e.exe"1⤵
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD59630b8ea9ca761a6b5791717c4a2d822
SHA1bb7ab92de2fb0b6839bb662340bae6d8140cf8c8
SHA2568e0f214ea0508563124dc1b8aa30166b641265ab5cc66d1ea892a841278f5612
SHA512eeaf67a3b11e4279d759484360dd185ca2aaa7baecb72b3b11ef47574004072705e8f14b366f1abf9730e77d94a2ef523a54c871e288df4563f605a3514600be
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
29.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
29.7MB
-
Filesize
29.7MB