Analysis

  • max time kernel
    147s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 01:17

General

  • Target

    31e617ddcb4a15af638cc1223726b9a5820410f2c6686c5bf7ac3d4d16e42eca.exe

  • Size

    2.8MB

  • MD5

    43a306e7a7069e0820d91d9e7f741137

  • SHA1

    6ca2e7260cceed3132f2c7cc3bb966bb34e6e287

  • SHA256

    31e617ddcb4a15af638cc1223726b9a5820410f2c6686c5bf7ac3d4d16e42eca

  • SHA512

    1145f13dfcab38c50831b75f2d5dca91d7591252474c4be0f724ffc88ec31e5897acfb45f1c98d0d008005ff106347305b67feed63ba2653d48249af112f0b3d

  • SSDEEP

    49152:SsAK5wCl12ZKqPJH9Tp0En+v0gU3xURUOqaHewEI518bYXwAyGjeL:3AkeZKe9Tpwv0gfUuKkXnpO

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 37 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\31e617ddcb4a15af638cc1223726b9a5820410f2c6686c5bf7ac3d4d16e42eca.exe
    "C:\Users\Admin\AppData\Local\Temp\31e617ddcb4a15af638cc1223726b9a5820410f2c6686c5bf7ac3d4d16e42eca.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2972-0-0x0000000000400000-0x000000000081F000-memory.dmp

    Filesize

    4.1MB

  • memory/2972-1-0x0000000076710000-0x0000000076757000-memory.dmp

    Filesize

    284KB

  • memory/2972-503-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-508-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-512-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-516-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-528-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-526-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-524-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-522-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-520-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-518-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-514-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-510-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-506-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-504-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-530-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-532-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-534-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-550-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-556-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-558-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-554-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-564-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-562-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-560-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-552-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-548-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-546-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-544-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-542-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-540-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-538-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB

  • memory/2972-536-0x00000000025E0000-0x00000000026F1000-memory.dmp

    Filesize

    1.1MB