Analysis

  • max time kernel
    139s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/11/2023, 19:45

General

  • Target

    e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe

  • Size

    3.5MB

  • MD5

    f9d8ed5e485f403a69a0b1b94c6fce5d

  • SHA1

    d131a69cd72d45efcdb3b7b6518e65864689a325

  • SHA256

    e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274

  • SHA512

    7bb5cdd670f79d1a7e14ec2f66bf1941dab14329d88c83605a84bf65ecee8d0604947a374b05d6491c33e6e9aa47697438a76eec6423528956bb4295315f2d23

  • SSDEEP

    98304:RPZ+M9qNK4kzmwbJb7GqKh9RWYgDNgwFH5wBCQT:RPUBAJzmWJb7NGJeJt51k

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe
    "C:\Users\Admin\AppData\Local\Temp\e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/648-0-0x00007FF63C8C0000-0x00007FF63D81B000-memory.dmp

    Filesize

    15.4MB

  • memory/648-1-0x00007FF42A6B0000-0x00007FF42AA81000-memory.dmp

    Filesize

    3.8MB

  • memory/648-3-0x00007FF63C8C0000-0x00007FF63D81B000-memory.dmp

    Filesize

    15.4MB

  • memory/648-4-0x00007FF63C8C0000-0x00007FF63D81B000-memory.dmp

    Filesize

    15.4MB

  • memory/648-5-0x00007FF63C8C0000-0x00007FF63D81B000-memory.dmp

    Filesize

    15.4MB

  • memory/648-6-0x00007FF63C8C0000-0x00007FF63D81B000-memory.dmp

    Filesize

    15.4MB

  • memory/648-7-0x00007FF42A6B0000-0x00007FF42AA81000-memory.dmp

    Filesize

    3.8MB