64c0e0a0591adfefd3c93fa34336c5e7efe4cf7c226a5324f8fe05ae20485369

Analysis

max time kernel
165s
max time network
178s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2023, 00:00

Target

64c0e0a0591adfefd3c93fa34336c5e7efe4cf7c226a5324f8fe05ae20485369.exe
Size

3.7MB
MD5

2ae28b5163b7c1e83d15ac16a4e17a66
SHA1

037562abe8fa931af3239c5e66b67074927c128e
SHA256

64c0e0a0591adfefd3c93fa34336c5e7efe4cf7c226a5324f8fe05ae20485369
SHA512

284f6b7b619d0ec8d7a6e7d661f010f3a3e329117f9c2b62f92c29af75117f7a8ccdfc43ec18a257b183290c3b5782fd392ee8888d61707f182aace3de157c81
SSDEEP

98304:C6JNsf9TfjSZE2Ifw2n0iFgN0gjiX7ayK93dYr:ZeB80nlDgq2yOq

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
1888	64c0e0a0591adfefd3c93fa34336c5e7efe4cf7c226a5324f8fe05ae20485369.exe

C:\Users\Admin\AppData\Local\Temp\64c0e0a0591adfefd3c93fa34336c5e7efe4cf7c226a5324f8fe05ae20485369.exe
"C:\Users\Admin\AppData\Local\Temp\64c0e0a0591adfefd3c93fa34336c5e7efe4cf7c226a5324f8fe05ae20485369.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1888

memory/1888-0-0x0000000000400000-0x0000000000A20000-memory.dmp

Filesize
6.1MB

Download
memory/1888-1-0x0000000002B70000-0x0000000002C52000-memory.dmp

Filesize
904KB

Download
memory/1888-2-0x0000000000400000-0x0000000000A20000-memory.dmp

Filesize
6.1MB

Download
memory/1888-3-0x0000000002B70000-0x0000000002C52000-memory.dmp

Filesize
904KB

Download