Analysis
-
max time kernel
141s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
23/11/2023, 09:02
Static task
static1
Behavioral task
behavioral1
Sample
deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe
Resource
win10v2004-20231023-en
General
-
Target
deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe
-
Size
4.4MB
-
MD5
2c742b167e26b1db0d14efcb0f4ed041
-
SHA1
a31e4a7c03a778b2f48fca00d1693c2b56460df3
-
SHA256
deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1
-
SHA512
450459f5ed9e1a8c0f4c6633b58c3bd30e1e509d960dcbfa7fe7dc6f0f1e4591af7eb63b68abdfc8e66150a8ac02b6b35cca41c8264fae14f3e15c4ec3639631
-
SSDEEP
98304:pIf7WYHDUxVrlL3FbV6rcKmgVJ6BpCaRGyV9sYoUhylpYm:dVbbV6NmgVJ4pCaR/rIi
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
pid Process 2224 deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe 2224 deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe 2224 deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2224 deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe"C:\Users\Admin\AppData\Local\Temp\deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2224