Analysis
-
max time kernel
133s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
24/08/2023, 09:28
Static task
static1
Behavioral task
behavioral1
Sample
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe
Resource
win10v2004-20230703-en
General
-
Target
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe
-
Size
3.4MB
-
MD5
a26e759f6aeea626a397e6ab02cd330f
-
SHA1
5dbd646f6ae1df6328c3a864f68e34f0817758d9
-
SHA256
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9
-
SHA512
17eb279a40e242552f397b487dcc6fe0589b7a287077d6a446d2ad3ccdf7ec1d08e71ba31a8f3f0061baa5cd08def9bac0d8481b5b129b60504d79daf6a314a0
-
SSDEEP
98304:MILxRa60rqiM3yYjH7IukHHymEdyPXvQTph6V+nbAv:JR0roDIukHSyPvWAgne
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1192 1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe 1192 1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1192 1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe 1192 1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe"C:\Users\Admin\AppData\Local\Temp\1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:1192