e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19

Resubmissions

02/02/2024, 16:51

02/02/2024, 04:36

max time kernel
118s
max time network
139s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02/02/2024, 04:36

Target
e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19.exe
Size 13.1MB
Sample240202-e8nb1sgbdq
SHA256 e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19
MD5 c6e170d9ee35eb2a5ccc7b8eb335166b
SHA1 45667620bc034b0204a0a987a31ad8bac53ba37a
SHA512 7b8a94946291a8c56a54c86120598dd94d4b2a3ba9ef715068a0de42c94fed3f277a19e7cf2f2dae9c7ca3ae0924bf1a259f725459bb5932857e96071ced90e2
SSDEEP 393216:dLIr9RFqqgiN/FNvwJU6sJKmD5rSGoCoi:xs9qqh1fwJ4XSSoi
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2404	e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19.exe
2404	e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19.exe

C:\Users\Admin\AppData\Local\Temp\e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19.exe
"C:\Users\Admin\AppData\Local\Temp\e726bf1cabc5a71bc780c3966ee9df67d03bfd95b234c2a4bcf29cca302c1b19.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2404