Analysis

  • max time kernel
    90s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/10/2023, 18:38

General

  • Target

    512bf962256227925485a51455e4dea6a916a525d443ec3b625637d5f2e3a2ea.exe

  • Size

    1.6MB

  • MD5

    8ac01d783209b2eda03ef975a567007b

  • SHA1

    12167f1f11c471a988d2ca5f59c148ce07326b44

  • SHA256

    512bf962256227925485a51455e4dea6a916a525d443ec3b625637d5f2e3a2ea

  • SHA512

    c905842d00f690c23e9616e7ca5f60cc0ac0ce9bfeb884d6f87003d3b5538a8a72baa33252d83c34742b2ebb1eb92945644928851c5d286341e8a59c26624fe1

  • SSDEEP

    24576:rbBVxl8JCDPYch0GZwglS+70Vv07bfV76F3dZDa3Cb2byC39bnakLwyhs:PYuPYc0GZwFicF3dtaSCrL0

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\512bf962256227925485a51455e4dea6a916a525d443ec3b625637d5f2e3a2ea.exe
    "C:\Users\Admin\AppData\Local\Temp\512bf962256227925485a51455e4dea6a916a525d443ec3b625637d5f2e3a2ea.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4772-0-0x0000000000400000-0x00000000005E5000-memory.dmp

    Filesize

    1.9MB

  • memory/4772-1-0x0000000002820000-0x0000000002902000-memory.dmp

    Filesize

    904KB

  • memory/4772-2-0x0000000000400000-0x00000000005E5000-memory.dmp

    Filesize

    1.9MB

  • memory/4772-3-0x0000000002820000-0x0000000002902000-memory.dmp

    Filesize

    904KB