Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    18/11/2023, 07:02

General

  • Target

    232c75c4deb0b6a1cc218828da3888dc65a1d653f591364bcbe5b69e41f8c4a7.exe

  • Size

    3.1MB

  • MD5

    e17d8328cc75ec0a878d50d2ad9f5b6f

  • SHA1

    c3b008440bc4d779c3681591bf84a418e8ef9662

  • SHA256

    232c75c4deb0b6a1cc218828da3888dc65a1d653f591364bcbe5b69e41f8c4a7

  • SHA512

    8c86ce718dc474d30c1fbf3dc083244e78456c396ae4a5c5c4832290ce52d2ca4052a5dff2f37ed4a0af6257c461e2fa71a580d47ae9c4f94f239cfa764c4e95

  • SSDEEP

    49152:DOxW4fJz5pdqBdNq12pm4oGPWllL/VUddDXcM1wMLXNxnxOfxI19PyXYpcF3dtaz:cW4Rws2pa0WntedQSw5puaXY23dYr

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\232c75c4deb0b6a1cc218828da3888dc65a1d653f591364bcbe5b69e41f8c4a7.exe
    "C:\Users\Admin\AppData\Local\Temp\232c75c4deb0b6a1cc218828da3888dc65a1d653f591364bcbe5b69e41f8c4a7.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2284-0-0x0000000000400000-0x000000000087A000-memory.dmp

    Filesize

    4.5MB

  • memory/2284-1-0x00000000024B0000-0x0000000002592000-memory.dmp

    Filesize

    904KB

  • memory/2284-2-0x0000000000400000-0x000000000087A000-memory.dmp

    Filesize

    4.5MB

  • memory/2284-3-0x00000000024B0000-0x0000000002592000-memory.dmp

    Filesize

    904KB