6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a

Analysis

max time kernel
3s
max time network
9s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
08/10/2023, 01:49

Target

6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a.exe
Size

3.0MB
MD5

cddc174c6c9e3aee7d83589a203cfa28
SHA1

a565602ddcdfe926ea92bed35d5c0f56e2e17c4d
SHA256

6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a
SHA512

c2277c0e954d101973fccf06508269335b4361bea8eba8f771caecb39d0a5b49df1fa1c819384373b89cd4583e1a3b2580afe1ba78bebe99eae5113a8ec36de0
SSDEEP

49152:V2sd6xejQQCCiO23ORcOAFXlpiiQV/gsEFRQOEKgd6GJM9b0RIgIUT1hE5Omv4lL:V7cQCCiO2IcOKtQNgsEFvoTJML/UbEo1

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
3224	6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a.exe

C:\Users\Admin\AppData\Local\Temp\6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a.exe
"C:\Users\Admin\AppData\Local\Temp\6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3224