Analysis

  • max time kernel
    225s
  • max time network
    241s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 02:42

General

  • Target

    093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760.exe

  • Size

    3.5MB

  • MD5

    ff501bd402a0743fd752eb38a2e651e4

  • SHA1

    1d81db90b9d202cc97aa0ba04b5062d681725c03

  • SHA256

    093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760

  • SHA512

    19a1699f4647cff3c86248c9f6e1e32dfd5bda4dddd7a17d7d558b682b35dc9d1f5cdd88c23f7977d037f5068d223cc8473b490e175391bf5f4d4983a2bd6dad

  • SSDEEP

    49152:Dd3CuXbNXRAGEDA/SY1EBnu4HekFe6of/6T6+67Pg/tbU8l0scF3dtaSCrL:9CurN6hDA/Sr7ekfE/6m+6E/tbY3dYr

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760.exe
    "C:\Users\Admin\AppData\Local\Temp\093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:3400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3400-0-0x0000000000400000-0x0000000000961000-memory.dmp

    Filesize

    5.4MB

  • memory/3400-1-0x0000000000400000-0x0000000000961000-memory.dmp

    Filesize

    5.4MB

  • memory/3400-2-0x0000000002B30000-0x0000000002C12000-memory.dmp

    Filesize

    904KB

  • memory/3400-3-0x0000000002B30000-0x0000000002C12000-memory.dmp

    Filesize

    904KB