Analysis

  • max time kernel
    117s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 22:46

General

  • Target

    50783985481a882bf11bc18a97079a91b45b184f47da4f7faa4c31fdaa3bd696.exe

  • Size

    8.6MB

  • MD5

    044d5baff2880c4e5cbd442f20063174

  • SHA1

    97d439271a2dd0cf0ec84d5e6e8725a6a67a0003

  • SHA256

    50783985481a882bf11bc18a97079a91b45b184f47da4f7faa4c31fdaa3bd696

  • SHA512

    55abecbea3270643e5c6e402dc0f70b3ff1a549d53724456d5f6459f9ec0521d67229f5b084693362b181b12c1740f25903fbfd8808a232ccbb3f1614719155b

  • SSDEEP

    196608:5+hX57Vluj8urKO9begx9aH/tBbE3VcHPwv:4hfgKOe28H/PbE3CP

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\50783985481a882bf11bc18a97079a91b45b184f47da4f7faa4c31fdaa3bd696.exe
    "C:\Users\Admin\AppData\Local\Temp\50783985481a882bf11bc18a97079a91b45b184f47da4f7faa4c31fdaa3bd696.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4964-0-0x0000000000400000-0x000000000147F000-memory.dmp

    Filesize

    16.5MB

  • memory/4964-1-0x0000000001A60000-0x0000000001A61000-memory.dmp

    Filesize

    4KB

  • memory/4964-2-0x0000000001A70000-0x0000000001A71000-memory.dmp

    Filesize

    4KB

  • memory/4964-3-0x00000000033E0000-0x00000000033E1000-memory.dmp

    Filesize

    4KB

  • memory/4964-4-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/4964-5-0x0000000000400000-0x000000000147F000-memory.dmp

    Filesize

    16.5MB

  • memory/4964-6-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/4964-7-0x0000000003410000-0x0000000003411000-memory.dmp

    Filesize

    4KB

  • memory/4964-10-0x0000000003440000-0x0000000003441000-memory.dmp

    Filesize

    4KB

  • memory/4964-9-0x0000000003430000-0x0000000003431000-memory.dmp

    Filesize

    4KB

  • memory/4964-14-0x0000000000400000-0x000000000147F000-memory.dmp

    Filesize

    16.5MB