Analysis
-
max time kernel
152s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 05:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b618e1b147cb86ce4577fbb93159a735.exe
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b618e1b147cb86ce4577fbb93159a735.exe
Resource
win10v2004-20230915-en
3 signatures
150 seconds
General
-
Target
b618e1b147cb86ce4577fbb93159a735.exe
-
Size
42.0MB
-
MD5
b618e1b147cb86ce4577fbb93159a735
-
SHA1
614c225e955ef5be22d1634f0d0076ac43fde6bc
-
SHA256
8e315742187129ef3f131b4f85463528bce1ad3786cc82878c74f0713f0952b3
-
SHA512
81b458870b29ac967b5b7b3cca427a655f66582b2f6ffac482c08592c1f82614aa5a318d0be4be822a580679413b325f153bccc8bdc450641da095e2b5695082
-
SSDEEP
786432:yNBX/wt7nsP5vDU0ViaasnRLZoIF80XC4KktY6BIK//Z4aOx2RWavT:yb/8sBA0faKLWIFnRYY/x4
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
pid Process 2100 b618e1b147cb86ce4577fbb93159a735.exe 2100 b618e1b147cb86ce4577fbb93159a735.exe 2100 b618e1b147cb86ce4577fbb93159a735.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2100 b618e1b147cb86ce4577fbb93159a735.exe 2100 b618e1b147cb86ce4577fbb93159a735.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2100 b618e1b147cb86ce4577fbb93159a735.exe