Resubmissions

12-11-2024 19:49

241112-yjspzssrcq 8

30-04-2024 18:17

240430-ww4lxacg3v 7

Analysis

  • max time kernel
    92s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-04-2024 18:17

General

  • Target

    PBCCRCPassGuardXInputService.exe

  • Size

    325KB

  • MD5

    dc606c1a0dc7d554fb2f3f8f1d2388a7

  • SHA1

    3119c24f69ea3b5e595100ba8a05badb2e49fcdc

  • SHA256

    24550160fdf34fac8895da3f8799dc284654222291803a006302a60ef5299407

  • SHA512

    cd4246dd524821f262907721ef22231fa505afae135abe6dfe1bd100765644446a084f857ae52502ef4ab307b8f3ea3c992938b471a54c2b9482435bad823f9f

  • SSDEEP

    6144:lzBAeL5G6yq91UawxAT+vMnjoctZpRg78jBX:lv5nwTqT+evf08jh

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PBCCRCPassGuardXInputService.exe
    "C:\Users\Admin\AppData\Local\Temp\PBCCRCPassGuardXInputService.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2988-0-0x00000000007F0000-0x0000000000844000-memory.dmp

    Filesize

    336KB

  • memory/2988-1-0x00000000007F0000-0x0000000000844000-memory.dmp

    Filesize

    336KB

  • memory/2988-2-0x00000000007F0000-0x0000000000844000-memory.dmp

    Filesize

    336KB