fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
07/10/2023, 18:01

Target

fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b.exe
Size

1.6MB
MD5

3695151e9324f2fe838bf1e7bdae4e89
SHA1

45c59c73fd59e8af1fe6fa7f96e19b0d0026a6ef
SHA256

fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b
SHA512

bc9d9f51ea4a15f40a80cb905ddedf984515c443e4cf01bf2aefeaf5a799b8d23a9de5f3eac15e70f7878e530ba2178fb51e9e27339e01b56c21c0ea07c4afbd
SSDEEP

24576:/bBVxx5zrf2DRnpiLU0/YvK413vdjcfRK7vQvN7pHMrxkg5DUdpv7:DJv29pJ0Q1fJ2UYdpHM9kg5st7

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

pid	Process
1692	fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b.exe
1692	fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b.exe
1692	fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b.exe

C:\Users\Admin\AppData\Local\Temp\fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b.exe
"C:\Users\Admin\AppData\Local\Temp\fefecf539ef009db9a64e46fe975b5179195ed63f4d8a935ab85784ed1f0ce0b.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1692

memory/1692-0-0x0000000000400000-0x00000000008BD000-memory.dmp

Filesize
4.7MB

Download
memory/1692-1-0x0000000000400000-0x00000000008BD000-memory.dmp

Filesize
4.7MB

Download