Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
11-01-2024 11:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
536dcf8f5e4eff0c187d488160c369f8.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
536dcf8f5e4eff0c187d488160c369f8.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
536dcf8f5e4eff0c187d488160c369f8.exe
-
Size
174KB
-
MD5
536dcf8f5e4eff0c187d488160c369f8
-
SHA1
421e24dcefe612a26866b6abb3fbba54a3c9f87d
-
SHA256
73bc136e61d5dd9669b2e266f33b067615a378b628030f387a8472c9c6f78715
-
SHA512
fb3c661170eafc122f7306fff845b83c9cf41375c6c164146cb7be279630206463ba41d0b168dec054d9db0a87c9786a691d7220e1fc4a4b3585d23656ea5787
-
SSDEEP
3072:7U2ToHp4pPoDRxXNzr0dpChyFEhl2lwOm2nkgkVbKZdtInWcZCy8sZ2s2rP:7U2To6oDRxX5Y+l2xdnknWdtwWMg22sM
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 812 536dcf8f5e4eff0c187d488160c369f8.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 812 536dcf8f5e4eff0c187d488160c369f8.exe