Analysis

  • max time kernel
    17s
  • max time network
    29s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2023 04:30

General

  • Target

    WareHub.exe

  • Size

    16.7MB

  • MD5

    b47bb50e982a506b24f8a8755976a1ab

  • SHA1

    def13b8444e0be6aceb80d246a3feff9074570c9

  • SHA256

    1b385604d945f9a600f47439e3673452e0b83642423205403d5d638f85d38b18

  • SHA512

    bbf6c2ce9dc42856246fe7302e77a172ce2cda8374e7d305ca59f52cc5adaa0855341cd9187a8dd1e050ea7d04e793a1d6ac0eea4f3ce269620f0d6e50ef21a6

  • SSDEEP

    393216:Vi3BQT0nxPwpNkyZLW0FLy+0W7r+q/Koz/mYRS/OGJGLShb3cmTX:VkQgnxPE7z++0W7ymKk/mYRSXb3tX

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WareHub.exe
    "C:\Users\Admin\AppData\Local\Temp\WareHub.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:1540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1540-0-0x00000000774B0000-0x00000000774B2000-memory.dmp

    Filesize

    8KB

  • memory/1540-3-0x000000013F350000-0x0000000141423000-memory.dmp

    Filesize

    32.8MB

  • memory/1540-2-0x00000000774B0000-0x00000000774B2000-memory.dmp

    Filesize

    8KB

  • memory/1540-5-0x00000000774B0000-0x00000000774B2000-memory.dmp

    Filesize

    8KB

  • memory/1540-7-0x00000000774E0000-0x00000000774E2000-memory.dmp

    Filesize

    8KB

  • memory/1540-6-0x0000000077300000-0x00000000774A9000-memory.dmp

    Filesize

    1.7MB

  • memory/1540-9-0x00000000774E0000-0x00000000774E2000-memory.dmp

    Filesize

    8KB

  • memory/1540-11-0x00000000774E0000-0x00000000774E2000-memory.dmp

    Filesize

    8KB

  • memory/1540-12-0x000000013F350000-0x0000000141423000-memory.dmp

    Filesize

    32.8MB

  • memory/1540-16-0x000000013F350000-0x0000000141423000-memory.dmp

    Filesize

    32.8MB

  • memory/1540-17-0x0000000077300000-0x00000000774A9000-memory.dmp

    Filesize

    1.7MB