Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22-10-2023 11:44

General

  • Target

    30cdcbe2b55b8c0e151c9dab8adadc278eed7331b8cf1b337ac956886242236b.exe

  • Size

    3.1MB

  • MD5

    ff5bee354595dbd7a7a4498d9b1779bb

  • SHA1

    70f3152379da10a010cb89545f6aaa6d1a3461bb

  • SHA256

    30cdcbe2b55b8c0e151c9dab8adadc278eed7331b8cf1b337ac956886242236b

  • SHA512

    5a3c29b41bed2736050f919afeede095b8c5a4aa95917a05085b7119d8fbd14746ff64a171d79cc32faf44eaeeb4c37d7d13398c89892e3dfe2e60d55ee27e2f

  • SSDEEP

    49152:jTxTGe9+wHkhDYffbEoEkwrIGbU99Y4Eq29kcfeZ8v/2RxlVVcF3dtaSCrL5C:xTFt0qDPEp14Eq3cmHXlVq3dYrg

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\30cdcbe2b55b8c0e151c9dab8adadc278eed7331b8cf1b337ac956886242236b.exe
    "C:\Users\Admin\AppData\Local\Temp\30cdcbe2b55b8c0e151c9dab8adadc278eed7331b8cf1b337ac956886242236b.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2948-0-0x0000000000400000-0x000000000089B000-memory.dmp

    Filesize

    4.6MB

  • memory/2948-1-0x00000000024E0000-0x00000000025C2000-memory.dmp

    Filesize

    904KB

  • memory/2948-2-0x00000000024E0000-0x00000000025C2000-memory.dmp

    Filesize

    904KB

  • memory/2948-3-0x0000000000400000-0x000000000089B000-memory.dmp

    Filesize

    4.6MB

  • memory/2948-4-0x00000000024E0000-0x00000000025C2000-memory.dmp

    Filesize

    904KB

  • memory/2948-5-0x00000000024E0000-0x00000000025C2000-memory.dmp

    Filesize

    904KB