Analysis

  • max time kernel
    149s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    23-09-2023 02:54

General

  • Target

    cc8cd47813589f92f6b9590f0bd362951fcef08cba0d5754b5b73444339cdd1d.exe

  • Size

    2.0MB

  • MD5

    9fc74fb72a3e9cd57ac861ab46ffdf18

  • SHA1

    a3f41c1c390817257353f53e88003b88b08fa951

  • SHA256

    cc8cd47813589f92f6b9590f0bd362951fcef08cba0d5754b5b73444339cdd1d

  • SHA512

    b0c9dba5063fb1010c23fab9946397a5f0a95c3bde689541f0cca1ac2a90a54012057d2fdfcfe76ebe122d73a015d3e24bb3c19b902ed7c94e98117e676acfe0

  • SSDEEP

    49152:+G2KWbGGL1vZx/zm4f6f5QT98yaZ+PRNB8U6:+BKWb9L1f7GKT98y7PRcU6

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cc8cd47813589f92f6b9590f0bd362951fcef08cba0d5754b5b73444339cdd1d.exe
    "C:\Users\Admin\AppData\Local\Temp\cc8cd47813589f92f6b9590f0bd362951fcef08cba0d5754b5b73444339cdd1d.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2412-0-0x0000000000400000-0x00000000005F8000-memory.dmp

    Filesize

    2.0MB

  • memory/2412-1-0x0000000075980000-0x00000000759C7000-memory.dmp

    Filesize

    284KB

  • memory/2412-811-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-812-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-814-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-816-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-818-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-820-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-822-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-824-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-826-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-828-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-830-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-832-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-834-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-836-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-838-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-840-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-842-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-844-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-846-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-848-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-850-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-852-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-854-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-856-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-858-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-860-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-862-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-864-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-866-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-868-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-870-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-872-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-2547-0x00000000020B0000-0x0000000002231000-memory.dmp

    Filesize

    1.5MB

  • memory/2412-8687-0x0000000002360000-0x0000000002471000-memory.dmp

    Filesize

    1.1MB

  • memory/2412-8694-0x0000000000400000-0x00000000005F8000-memory.dmp

    Filesize

    2.0MB