260a335646b332b35a9d4321e4f3d619e88b2840311719041d87a976e7f9f4a2 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
03/01/2024, 11:32

Sharing

Report Analysis Logs

General

Target

server_0027.exe
Size

2.0MB
MD5

dcb2d9d41c04659474ffd2bd21b99e12
SHA1

5f974454d754daa023c6206b1b9c315da58025fa
SHA256

c1f3c3c670636cf8505ab12c40aa17833657eb4c74001309a25e306b7ce177ad
SHA512

da23ff055193d19cb860262946517d0ec7715a41fd196a8799f9af62e7074c738f967e285a5fcc933c920f5e5eed3edd40ad896afa39f44bc4642fcec55f2850
SSDEEP

49152:AQpI6wErIHKUcpn/oKJ4Hc2oXqRGmBayXb:AUI6rIAQgMxomBPb

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2548	server_0027.exe

C:\Users\Admin\AppData\Local\Temp\server_0027.exe
"C:\Users\Admin\AppData\Local\Temp\server_0027.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2548-0-0x0000000140000000-0x00000001401F6000-memory.dmp

Filesize
2.0MB

Download
memory/2548-1-0x0000000140000000-0x00000001401F6000-memory.dmp

Filesize
2.0MB

Download