Analysis

  • max time kernel
    147s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2023, 00:01

General

  • Target

    8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe

  • Size

    5.7MB

  • MD5

    1d803abd99ec2ec43e028558d0752f8d

  • SHA1

    8fdc3a5538fd3b626f93785d3ef208ca2c6f4a4a

  • SHA256

    8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836

  • SHA512

    b33a7084d064ce9e3b737e08a2a7159fdd437a182536183f01aea7f1f7d6d33545619b56aaf6e11fcfa6876efd36e7741c53c5b07f8b375f591e00ef5398b1e6

  • SSDEEP

    98304:jK6eOuBPJK3gMCKM46WsLKKvp6iubXBvZ9aAYtsz9lnvc9wDJ:jFhC9Esuy6ikBvZFYtK95vjJ

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 29 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe
    "C:\Users\Admin\AppData\Local\Temp\8e342a89e23e9a4446be562b3a0ac7f4da52cd53db5d294261efab5fc88f8836.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2936-0-0x0000000000400000-0x0000000000F8A000-memory.dmp

    Filesize

    11.5MB

  • memory/2936-1-0x0000000075AC0000-0x0000000075B07000-memory.dmp

    Filesize

    284KB

  • memory/2936-816-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-814-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-812-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-811-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-818-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-822-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-820-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-824-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-828-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-826-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-830-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-832-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-836-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-834-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-838-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-840-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-844-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-846-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-842-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-848-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-852-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-850-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-854-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-858-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-860-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-856-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-862-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-864-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-866-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-868-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-870-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-872-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-2547-0x0000000002C00000-0x0000000002D81000-memory.dmp

    Filesize

    1.5MB

  • memory/2936-8686-0x0000000002D90000-0x0000000002EA1000-memory.dmp

    Filesize

    1.1MB

  • memory/2936-8693-0x0000000000400000-0x0000000000F8A000-memory.dmp

    Filesize

    11.5MB

  • memory/2936-8695-0x0000000000400000-0x0000000000F8A000-memory.dmp

    Filesize

    11.5MB

  • memory/2936-8694-0x0000000000400000-0x0000000000F8A000-memory.dmp

    Filesize

    11.5MB

  • memory/2936-8697-0x0000000000400000-0x0000000000F8A000-memory.dmp

    Filesize

    11.5MB

  • memory/2936-8698-0x0000000000400000-0x0000000000F8A000-memory.dmp

    Filesize

    11.5MB

  • memory/2936-8702-0x0000000000400000-0x0000000000F8A000-memory.dmp

    Filesize

    11.5MB