Analysis
-
max time kernel
147s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
09/10/2023, 00:01
Static task
static1
Behavioral task
behavioral1
Sample
8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe
Resource
win10v2004-20230915-en
General
-
Target
8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe
-
Size
5.7MB
-
MD5
1d803abd99ec2ec43e028558d0752f8d
-
SHA1
8fdc3a5538fd3b626f93785d3ef208ca2c6f4a4a
-
SHA256
8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836
-
SHA512
b33a7084d064ce9e3b737e08a2a7159fdd437a182536183f01aea7f1f7d6d33545619b56aaf6e11fcfa6876efd36e7741c53c5b07f8b375f591e00ef5398b1e6
-
SSDEEP
98304:jK6eOuBPJK3gMCKM46WsLKKvp6iubXBvZ9aAYtsz9lnvc9wDJ:jFhC9Esuy6ikBvZFYtK95vjJ
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 29 IoCs
pid Process 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe 2936 8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe"C:\Users\Admin\AppData\Local\Temp\8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2936