5b28093e0cad96349915e1ffd06691e657d4c9f666aa0af702e898a35ce2c3fa

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18-01-2024 09:42

Target

SecuriteInfo.com.Trojan.Win64.Krypt.14673.670.dll
Size

859KB
MD5

8a5e13e08ad69baf83b7b1b76073c6b1
SHA1

e1796177d10d77b2e040c185e3c44e0714891218
SHA256

5b28093e0cad96349915e1ffd06691e657d4c9f666aa0af702e898a35ce2c3fa
SHA512

40990082a452cfb279a07f09d2bddb221f9d69ec5e1dfaad2cf6fdc79515d4f174a8609ddbc221df65cdaf19091a46d449d7ded8426e5692c828a5ab4afef8ee
SSDEEP

24576:LgTda8+FCEhjeoqbi/fi7Llfh0lhSMXlwpgoun:Cc8+wIyoqbRnleAKpn

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2316	rundll32.exe
2316	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Win64.Krypt.14673.670.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2316