Analysis

  • max time kernel
    139s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 15:38

General

  • Target

    72afefae42a45d361cd0cceadc61ed7c86405d02c30da97b29a2b201a7562ba7.exe

  • Size

    3.4MB

  • MD5

    ead3372eb68d063d124bc6a4a4a87e58

  • SHA1

    e6fb632c909f230584a5e3c5aa17c00f44bfb02f

  • SHA256

    72afefae42a45d361cd0cceadc61ed7c86405d02c30da97b29a2b201a7562ba7

  • SHA512

    6efe657211551d7a577fc574618f9ff1815cb83bf73b57e45ad5ae9094911c389696a63089792e99a4fb1e4d11090650731da1c6e2d30641e1e94e38d4a1632c

  • SSDEEP

    49152:qsSldwRQ6mj1FC0DXDGheKi6MiSjwAIb5YNvKEwRo7Ja7piK1cF3dtaSCrL:qjdD36AYBb5Y7jJeiKK3dYr

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\72afefae42a45d361cd0cceadc61ed7c86405d02c30da97b29a2b201a7562ba7.exe
    "C:\Users\Admin\AppData\Local\Temp\72afefae42a45d361cd0cceadc61ed7c86405d02c30da97b29a2b201a7562ba7.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4680-0-0x0000000000400000-0x0000000000BFC000-memory.dmp

    Filesize

    8.0MB

  • memory/4680-1-0x0000000002C10000-0x0000000002CF2000-memory.dmp

    Filesize

    904KB

  • memory/4680-2-0x0000000000400000-0x0000000000BFC000-memory.dmp

    Filesize

    8.0MB

  • memory/4680-3-0x0000000002C10000-0x0000000002CF2000-memory.dmp

    Filesize

    904KB