Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/09/2023, 03:11

General

  • Target

    7fa806a1639719c2204643e8ee3f5604df7098384d2d9ca8976d6cbb6dec1d3a.exe

  • Size

    3.0MB

  • MD5

    a96004803e96210e5912654d757f33a6

  • SHA1

    812deec5d81254872649eff3db26ce039c99d81d

  • SHA256

    7fa806a1639719c2204643e8ee3f5604df7098384d2d9ca8976d6cbb6dec1d3a

  • SHA512

    c5d33143dd5cbe984e908c4078e90fcc79db6e1afe4029f1987bce56b165a7e24ffbfd0b018f11d65427d3ccef9b0153be10fb86991da7a57d1a15ad7a85a2b0

  • SSDEEP

    49152:in9fa1d2MdZ13zvnq5IOgYLpekV0RzYYbFnqzjvkz/D0WcF3dtaSCrL:0faz2MdZ13zvJVY9ekVE+LkzLo3dYr

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7fa806a1639719c2204643e8ee3f5604df7098384d2d9ca8976d6cbb6dec1d3a.exe
    "C:\Users\Admin\AppData\Local\Temp\7fa806a1639719c2204643e8ee3f5604df7098384d2d9ca8976d6cbb6dec1d3a.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2232

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2232-0-0x0000000000400000-0x0000000000854000-memory.dmp

          Filesize

          4.3MB

        • memory/2232-1-0x0000000002970000-0x0000000002A52000-memory.dmp

          Filesize

          904KB

        • memory/2232-2-0x0000000000400000-0x0000000000854000-memory.dmp

          Filesize

          4.3MB

        • memory/2232-3-0x0000000002970000-0x0000000002A52000-memory.dmp

          Filesize

          904KB