Analysis
-
max time kernel
97s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
29/12/2023, 07:08
General
-
Target
f02cd5b58c95004cc8b709b74a5291abaaaabe7e484f8875994eb99861f0d7cd.exe
-
Size
7.6MB
-
MD5
6377153265b24660c67ef79ca0d70ec3
-
SHA1
972a763e94ea5d0f24cf0c7b3c482d4b7022a358
-
SHA256
f02cd5b58c95004cc8b709b74a5291abaaaabe7e484f8875994eb99861f0d7cd
-
SHA512
fdc4ef85e312a7ee24aead52bb54a24763111963fb48b024f2e327eb4be0eb9148e49e766f38ff5a86f1cb388a504d9f3c7aa837a3fd610b90a7a0bd84fa9ebe
-
SSDEEP
196608:+yiLBxsMhzLBDO1MnNcb1l79YPItZZ43B3:+yiNxIYN+BRZ4x
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f02cd5b58c95004cc8b709b74a5291abaaaabe7e484f8875994eb99861f0d7cd.exe"C:\Users\Admin\AppData\Local\Temp\f02cd5b58c95004cc8b709b74a5291abaaaabe7e484f8875994eb99861f0d7cd.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
4KB