Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    23-10-2023 09:45

General

  • Target

    92d68cbfd79286f0608e7fefdf12f42d26d8f8087b7f1f7d8d0132e5c3c5119b.exe

  • Size

    1.6MB

  • MD5

    6b4b500ee86933bbb5153c5b12a88b30

  • SHA1

    7c1ba5eea5591ecd856a7e8f00a20b89f9395e2a

  • SHA256

    92d68cbfd79286f0608e7fefdf12f42d26d8f8087b7f1f7d8d0132e5c3c5119b

  • SHA512

    0e50bf11e17c75ef8e602c52516968377dd60ba97926828ffbc5c29b7877789781e40003e9e71dc014e02b0a5fc792b2de5f34e9eb2ef5f13a538e06cabbf6e9

  • SSDEEP

    24576:qbBVxl8JCDPYFzeq70Vv07bfV76F3dZDa3Cb2byC39bnakLwyhy:GYuPYFze2cF3dtaSCrLq

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\92d68cbfd79286f0608e7fefdf12f42d26d8f8087b7f1f7d8d0132e5c3c5119b.exe
    "C:\Users\Admin\AppData\Local\Temp\92d68cbfd79286f0608e7fefdf12f42d26d8f8087b7f1f7d8d0132e5c3c5119b.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1488-0-0x0000000000400000-0x00000000005E5000-memory.dmp

    Filesize

    1.9MB

  • memory/1488-1-0x0000000002240000-0x0000000002322000-memory.dmp

    Filesize

    904KB

  • memory/1488-2-0x0000000000400000-0x00000000005E5000-memory.dmp

    Filesize

    1.9MB

  • memory/1488-3-0x0000000002240000-0x0000000002322000-memory.dmp

    Filesize

    904KB