Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
08-10-2023 14:32
Static task
static1
Behavioral task
behavioral1
Sample
646706d58a2638863e575d4fe811cc7a8ffa0bb9c2952116daaae6ac625daf5c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
646706d58a2638863e575d4fe811cc7a8ffa0bb9c2952116daaae6ac625daf5c.exe
Resource
win10v2004-20230915-en
General
-
Target
646706d58a2638863e575d4fe811cc7a8ffa0bb9c2952116daaae6ac625daf5c.exe
-
Size
2.8MB
-
MD5
40d4b0d0631ea07db19a89eb6e234ade
-
SHA1
aead9585cc58b74a8dc710e0863aaeedf80acd26
-
SHA256
646706d58a2638863e575d4fe811cc7a8ffa0bb9c2952116daaae6ac625daf5c
-
SHA512
f4a2a185e74e578b1485bf9e3d8cfb63f1ea53d22f13fdf1c6594ebed7b512974b448447259ad973ab11844035b98abb8afdb0872dee7a033f1cc6cb58334b41
-
SSDEEP
49152:gRsTP/1H9KuRlikznsqLIfskf8grEKlWu6cF3dtaSCrL5:5TneuXikz5Mfsk2W9T3dYr
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2708 646706d58a2638863e575d4fe811cc7a8ffa0bb9c2952116daaae6ac625daf5c.exe