Analysis
-
max time kernel
274s -
max time network
316s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 08:59
Static task
static1
Behavioral task
behavioral1
Sample
3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e.exe
Resource
win10v2004-20230915-en
General
-
Target
3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e.exe
-
Size
5.3MB
-
MD5
0cae341a0c501508637861053344be59
-
SHA1
1de19d002a578be4636befe6e637a5f48108f4a2
-
SHA256
3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e
-
SHA512
fb7a26e1aacde503acb899873a953c6d846caef49c0dd5b33f4f1e820a11379c3ecc3a0531f6eeaf73b5c3c6a2182b482bed6aea7723ea00be8d797ad64e060c
-
SSDEEP
98304:Pky42WLb9cehExS9z0gsS+Q8iFwXOLkzJuybpFyh1pbrx6I+ngfdP1EVdxE8QRJs:sy42W39fhExm7sj8dLybOh1pvkgbakH6
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2492 3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2492 3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e.exe"C:\Users\Admin\AppData\Local\Temp\3e62913c2d9db639514fb39693b42ddb59b339caf0c0e22371b27f8ab30e047e.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2492