Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
01-09-2023 22:21
General
-
Target
923aefbbb1c99bfac368e5e563723d7cc518e8c70597f105d474bfc3f8347307.exe
-
Size
812KB
-
MD5
8cba85dfd4ee878af76cf0406168d0be
-
SHA1
ca4ccd6c095884be4b23ef44bac760411b564e10
-
SHA256
923aefbbb1c99bfac368e5e563723d7cc518e8c70597f105d474bfc3f8347307
-
SHA512
b7f739b3e85388b5482013b4db27ec51a8d1d07790edea636eb565e1d1914e4988f95afc704c7b92348c0cd0307f0c1cc5843caf852240c901dd686b5dd45609
-
SSDEEP
12288:AqmytVdB0rPEDb3kCoI641jxy7GHEX2rnAv8MktrOKxp22CMOZ/1Sq:AqxtVfNDb31oT41+aneOrO4p2zMOZ/V
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\923aefbbb1c99bfac368e5e563723d7cc518e8c70597f105d474bfc3f8347307.exe"C:\Users\Admin\AppData\Local\Temp\923aefbbb1c99bfac368e5e563723d7cc518e8c70597f105d474bfc3f8347307.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1F0B0F0E120E156A155E15F0D0F160D0E160A.exeC:\Users\Admin\AppData\Local\Temp\1F0B0F0E120E156A155E15F0D0F160D0E160A.exe2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
812KB
MD5b8da294cfa12010a523a5ad05fcacda3
SHA1898e7b85be61c842c4753af6a422c5e4dcf1a15a
SHA25684447c0e02ea696bce26c376cf8a3d7fc5c543d9ad05756fb1d202a3cbb94bfa
SHA51298dc19d9e69fad822a263c9675b8ac52eca7b0c15a1e85cf41cfcd87f0d4b9abbd4e218bc2360085194ffc4dcc20602b494d27512f10ddfe3e0bc1ba8054a83c
-
Filesize
812KB
MD5b8da294cfa12010a523a5ad05fcacda3
SHA1898e7b85be61c842c4753af6a422c5e4dcf1a15a
SHA25684447c0e02ea696bce26c376cf8a3d7fc5c543d9ad05756fb1d202a3cbb94bfa
SHA51298dc19d9e69fad822a263c9675b8ac52eca7b0c15a1e85cf41cfcd87f0d4b9abbd4e218bc2360085194ffc4dcc20602b494d27512f10ddfe3e0bc1ba8054a83c
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB