Analysis

  • max time kernel
    146s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 14:51

General

  • Target

    3911ce16755937dd4a412dd18af6ad869df2ed186c573c9e07641707025dba8d.exe

  • Size

    2.7MB

  • MD5

    7403b5a5deedeba83539a9fbad665662

  • SHA1

    7ccf8eb3a082af84e4ae17853e4e72f4d0eb80a4

  • SHA256

    3911ce16755937dd4a412dd18af6ad869df2ed186c573c9e07641707025dba8d

  • SHA512

    9357897c6c1ce4348c62513fd6802f732dec7b6779ae6a8516aeed9be9edf1de47abe89ef665be715200c9f50ad0a9ab0a04748f77ae5fbdf2d86d91f11a9893

  • SSDEEP

    49152:nlX3ERwOQyU2mZo1aYzc72+qXBf9RXocF3dtaSCrL:R3iwO3jN1T+ABf393dYr

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3911ce16755937dd4a412dd18af6ad869df2ed186c573c9e07641707025dba8d.exe
    "C:\Users\Admin\AppData\Local\Temp\3911ce16755937dd4a412dd18af6ad869df2ed186c573c9e07641707025dba8d.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2216

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2216-0-0x0000000000400000-0x000000000077A000-memory.dmp

          Filesize

          3.5MB

        • memory/2216-1-0x0000000002760000-0x0000000002842000-memory.dmp

          Filesize

          904KB

        • memory/2216-2-0x0000000000400000-0x000000000077A000-memory.dmp

          Filesize

          3.5MB

        • memory/2216-3-0x0000000002760000-0x0000000002842000-memory.dmp

          Filesize

          904KB