Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
07-10-2023 07:23
Static task
static1
Behavioral task
behavioral1
Sample
7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe
Resource
win10v2004-20230915-en
General
-
Target
7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe
-
Size
11.4MB
-
MD5
b0a8685168537aa94b43839c40cd4bf7
-
SHA1
f2c7fa6eee3f3258d19dd8e2d44f2055d724eeec
-
SHA256
7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d
-
SHA512
eef980cba725f966f90b8763cda957688b61cd55f6fc118b232522526ed0d554fa0e7fd79b6a725493e1f02c4b314f0e6bd571558e7e2cc080a61c8de7abcef3
-
SSDEEP
196608:4mUk4Q5fSA/9clYaAqLM13ERxXptnBUkwo1bktiKF2dXaqUVtxoXpCRxpibmKYNS:xUk4Q5fSf6aAqC3mjaO8/FAaqUlLRxp0
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1368 7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1368 7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe 1368 7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe"C:\Users\Admin\AppData\Local\Temp\7b8f2b39b19372eef823f16edb56ef990df930fb46c1f8e6fceed9fbb1e34c4d.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:1368