Analysis
-
max time kernel
139s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
11/11/2023, 19:45
Static task
static1
Behavioral task
behavioral1
Sample
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe
Resource
win10v2004-20231020-en
General
-
Target
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe
-
Size
3.5MB
-
MD5
f9d8ed5e485f403a69a0b1b94c6fce5d
-
SHA1
d131a69cd72d45efcdb3b7b6518e65864689a325
-
SHA256
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274
-
SHA512
7bb5cdd670f79d1a7e14ec2f66bf1941dab14329d88c83605a84bf65ecee8d0604947a374b05d6491c33e6e9aa47697438a76eec6423528956bb4295315f2d23
-
SSDEEP
98304:RPZ+M9qNK4kzmwbJb7GqKh9RWYgDNgwFH5wBCQT:RPUBAJzmWJb7NGJeJt51k
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 648 e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe 648 e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe