Analysis

  • max time kernel
    141s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    23/11/2023, 09:02

General

  • Target

    deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe

  • Size

    4.4MB

  • MD5

    2c742b167e26b1db0d14efcb0f4ed041

  • SHA1

    a31e4a7c03a778b2f48fca00d1693c2b56460df3

  • SHA256

    deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1

  • SHA512

    450459f5ed9e1a8c0f4c6633b58c3bd30e1e509d960dcbfa7fe7dc6f0f1e4591af7eb63b68abdfc8e66150a8ac02b6b35cca41c8264fae14f3e15c4ec3639631

  • SSDEEP

    98304:pIf7WYHDUxVrlL3FbV6rcKmgVJ6BpCaRGyV9sYoUhylpYm:dVbbV6NmgVJ4pCaR/rIi

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe
    "C:\Users\Admin\AppData\Local\Temp\deca38f08d76cca6d3a2318fb50d5fd28f3547289f3b2c04b2ead422c382dff1.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2224-0-0x0000000000400000-0x0000000000AE9000-memory.dmp

    Filesize

    6.9MB

  • memory/2224-1-0x0000000002470000-0x0000000002543000-memory.dmp

    Filesize

    844KB

  • memory/2224-4-0x0000000000400000-0x0000000000AE9000-memory.dmp

    Filesize

    6.9MB

  • memory/2224-5-0x0000000000230000-0x0000000000238000-memory.dmp

    Filesize

    32KB

  • memory/2224-6-0x0000000000400000-0x0000000000AE9000-memory.dmp

    Filesize

    6.9MB