Overview

overview

7

Static

static

3

c8260d0f0f...5e.exe

windows7-x64

7

c8260d0f0f...5e.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    215s
  • max time network
    225s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2023 11:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c8260d0f0f277fd62e86c0c786fd25ee703a4607d4950ce3bc43bcb5dfb11f5e.exe

  • Size

    816KB

  • MD5

    7247ec375352ac97fcd774f7535b4207

  • SHA1

    b63229cc2743200a53e8e1a58768c4f15e917146

  • SHA256

    c8260d0f0f277fd62e86c0c786fd25ee703a4607d4950ce3bc43bcb5dfb11f5e

  • SHA512

    4cc010c8199cd6d2af417679ec7a6f528237e50948091559f919a7955ba348e429e31275760a9c6ec667cae718e4ea429264f6d7f4327b7ab91e87984c660bcf

  • SSDEEP

    24576:1Y4G2qLMJalsnqShyoo77lUabuSvbDQOOdIxJsG9R:q3XZynV4oDabuWbDQOcIxJJ9R

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c8260d0f0f277fd62e86c0c786fd25ee703a4607d4950ce3bc43bcb5dfb11f5e.exe
    "C:\Users\Admin\AppData\Local\Temp\c8260d0f0f277fd62e86c0c786fd25ee703a4607d4950ce3bc43bcb5dfb11f5e.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of WriteProcessMemory
    PID:4948
    • C:\Users\Admin\AppData\Local\Temp\1D0E0D0B120A156E155A15C0D0A160A0D160E.exe
      C:\Users\Admin\AppData\Local\Temp\1D0E0D0B120A156E155A15C0D0A160A0D160E.exe
      2⤵
      • Executes dropped EXE
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\1D0E0D0B120A156E155A15C0D0A160A0D160E.exe
    Filesize

    816KB

    MD5

    c0e1c9fb7609f84971d852b3460d31e9

    SHA1

    d83c75e9c417fa87415b9532ab2956a4d3f899c6

    SHA256

    230ccacd85fbb7413cae89ca127e3774b632d96afdc1f5444649efc2566e25d8

    SHA512

    8f539690fddc7b77b261d244692e944e2b03ea8864ef101e16e0171982d3674ff832c139067521128319b5b4b9683168ebf005202367803d7e197228140fb578

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\1D0E0D0B120A156E155A15C0D0A160A0D160E.exe
    Filesize

    816KB

    MD5

    c0e1c9fb7609f84971d852b3460d31e9

    SHA1

    d83c75e9c417fa87415b9532ab2956a4d3f899c6

    SHA256

    230ccacd85fbb7413cae89ca127e3774b632d96afdc1f5444649efc2566e25d8

    SHA512

    8f539690fddc7b77b261d244692e944e2b03ea8864ef101e16e0171982d3674ff832c139067521128319b5b4b9683168ebf005202367803d7e197228140fb578

    Download Submit

  • memory/2764-9-0x0000000000400000-0x00000000005AD000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/2764-11-0x0000000000400000-0x00000000005AD000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/2764-12-0x0000000000400000-0x00000000005AD000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/4948-0-0x0000000000400000-0x00000000005AD000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/4948-1-0x0000000000400000-0x00000000005AD000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/4948-8-0x0000000000400000-0x00000000005AD000-memory.dmp

    Filesize

    1.7MB

    Download