Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/12/2023, 12:00

General

  • Target

    86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89.exe

  • Size

    2.0MB

  • MD5

    f961f54a56d9ff28b9f8371a732eea6c

  • SHA1

    c09e39d9360fe8d39e3fe36e72b4f8135d475794

  • SHA256

    86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89

  • SHA512

    9c61426548686dfcffb3e0d03c68a52d02533b95509786cb67dd8eaa48722765ed7835005d05eb7d10ab061943ecbfc929ea09f9e4979efef07b7601d7049f85

  • SSDEEP

    49152:LVQniGJepo2bkn04yHYoWFtCWBhO3zdyiiam:8iwepoiqXQtWbMJyi9m

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 36 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89.exe
    "C:\Users\Admin\AppData\Local\Temp\86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:4700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4700-0-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-1-0x00000000752B0000-0x00000000754C5000-memory.dmp

    Filesize

    2.1MB

  • memory/4700-3875-0x0000000075F00000-0x00000000760A0000-memory.dmp

    Filesize

    1.6MB

  • memory/4700-5884-0x0000000076EC0000-0x0000000076F3A000-memory.dmp

    Filesize

    488KB

  • memory/4700-13069-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-13070-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-13071-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-13072-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-13074-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-13075-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-13076-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB

  • memory/4700-13078-0x0000000000400000-0x00000000006F5000-memory.dmp

    Filesize

    3.0MB