Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
27/11/2023, 05:59
General
-
Target
3c86a10628ee4d69fe6da33eba87576a9edf3637e284745c94b1a4c3a8be86eb.exe
-
Size
5.5MB
-
MD5
e17a264b52400a5719e44a9d4ab258d4
-
SHA1
2ca876d3f3d1f89e1b25d4c128fe4eb85be789d1
-
SHA256
3c86a10628ee4d69fe6da33eba87576a9edf3637e284745c94b1a4c3a8be86eb
-
SHA512
ffe255ca55bad4a6a7087afbd8989ef9279c11b4a5b945e19ed0852fb41df5ba2b1bb001bd09c219df6cf780fa7d5f739a55f78c8055261c780ea711d9ae46f1
-
SSDEEP
98304:JwfMNHfhCxKnq+NaSt0TfCP158+VnlEPmvQ06aZeaNJ/Zd8rv:9ZPNaeGYy+VnlXvQMZP8
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c86a10628ee4d69fe6da33eba87576a9edf3637e284745c94b1a4c3a8be86eb.exe"C:\Users\Admin\AppData\Local\Temp\3c86a10628ee4d69fe6da33eba87576a9edf3637e284745c94b1a4c3a8be86eb.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
880KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
5.6MB
-
Filesize
5.6MB