Analysis
-
max time kernel
62s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 15:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TS-240408-UF2.exe
Resource
win7-20240221-en
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
TS-240408-UF2.exe
Resource
win10v2004-20240319-en
2 signatures
120 seconds
General
-
Target
TS-240408-UF2.exe
-
Size
2.7MB
-
MD5
de8a353a40794daabafbd5462fea3571
-
SHA1
e8e962217d9a6c2201b495e26f8aa147950e088c
-
SHA256
2dd2908007aba876198370110e5a69ec2b1abd95af2735556ea63997114af111
-
SHA512
fdd2b9fb4cf81bbef3ea02978b80b6bc900e497292e290e58cfdc076ffe0ed33ff3f36eddebea8f5fe2369b14f194fb308d0d27357c866bf6e2586d3c670d543
-
SSDEEP
49152:9+BRpOhrpNt89pLu1FmRR/XCJvfoTZmq7jTzc1OFBlfXTWVu2ftHZfd5qhW2czuZ:apcrpfyu1F4/XCJv2Qf1clfTWFj5qg2/
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 8 IoCs
pid Process 1720 TS-240408-UF2.exe 1720 TS-240408-UF2.exe 1720 TS-240408-UF2.exe 1720 TS-240408-UF2.exe 1720 TS-240408-UF2.exe 1720 TS-240408-UF2.exe 1720 TS-240408-UF2.exe 1720 TS-240408-UF2.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1720 TS-240408-UF2.exe