Analysis
-
max time kernel
158s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 12:54
General
-
Target
7233af0357e4a8ab314bd7b088303b033884d092726bfe15afa3da2150efdb06.exe
-
Size
3.3MB
-
MD5
36b6c2f83a7c285839ec008eb470416b
-
SHA1
15035b06c93cf071469937fb49871ea7ea3e8938
-
SHA256
7233af0357e4a8ab314bd7b088303b033884d092726bfe15afa3da2150efdb06
-
SHA512
6d74f7b69e331045566a2187e95b14af9e51b2eb43a6e5f700c1da5f27e6360c11761d49007abecb179697e78ffd70d9817e63bf0a3781edf05c867de74b8a41
-
SSDEEP
98304:uaT0UjmCIpODbpzUAw25lVIRxw4kN0PqD4TnOHeHvP:PqpGp4HsUxHkqmEnOe3
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 27 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7233af0357e4a8ab314bd7b088303b033884d092726bfe15afa3da2150efdb06.exe"C:\Users\Admin\AppData\Local\Temp\7233af0357e4a8ab314bd7b088303b033884d092726bfe15afa3da2150efdb06.exe"1⤵
- Checks BIOS information in registry
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
6.9MB
-
Filesize
488KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB