Overview

overview

5

Static

static

3

262c96e273...8c.exe

windows7-x64

5

262c96e273...8c.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-09-2023 21:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    262c96e273998746e6d26459f21e73b1f28523dfb5ab684968a335ad639ce58c.exe

  • Size

    11.5MB

  • MD5

    87f4b6de9244ddee57e4d0974edb485f

  • SHA1

    9e7e8967b8b8743265cb43e506acd8daa988a8ac

  • SHA256

    262c96e273998746e6d26459f21e73b1f28523dfb5ab684968a335ad639ce58c

  • SHA512

    59678492de8e386f1066f7a5dacf97bca070013b3ba7c0c5f4a8477005999c2343decba97b4a02c6a6932bfa9255c163093bae4a7aa6db38d6069da525d63acc

  • SSDEEP

    196608:oH8ojE5CrD8YuwStlL327Xoud2gobZJPhUYok7efU9r6BNM22ER/DU14XVR9:oH8WsC0YMSXoud2TPRokZ9O4VER7U+XR

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\262c96e273998746e6d26459f21e73b1f28523dfb5ab684968a335ad639ce58c.exe
    "C:\Users\Admin\AppData\Local\Temp\262c96e273998746e6d26459f21e73b1f28523dfb5ab684968a335ad639ce58c.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2180-0-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-1-0x0000000076200000-0x0000000076415000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/2180-3875-0x0000000075FA0000-0x0000000076140000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2180-5884-0x0000000075DC0000-0x0000000075E3A000-memory.dmp

    Filesize

    488KB

    Download

  • memory/2180-13069-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13070-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13071-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13075-0x0000000004960000-0x0000000004982000-memory.dmp

    Filesize

    136KB

    Download

  • memory/2180-13076-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13077-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13078-0x00000000771E0000-0x00000000772D0000-memory.dmp

    Filesize

    960KB

    Download

  • memory/2180-13079-0x0000000004990000-0x00000000049A4000-memory.dmp

    Filesize

    80KB

    Download

  • memory/2180-13080-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13081-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13082-0x00000000771E0000-0x00000000772D0000-memory.dmp

    Filesize

    960KB

    Download

  • memory/2180-13090-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13091-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13092-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13093-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13094-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13095-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13096-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13097-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13098-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13099-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13100-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download

  • memory/2180-13101-0x0000000000400000-0x0000000001344000-memory.dmp

    Filesize

    15.3MB

    Download