Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 05:10
Static task
static1
Behavioral task
behavioral1
Sample
7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe
Resource
win10v2004-20240226-en
General
-
Target
7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe
-
Size
2.7MB
-
MD5
d8baebd78eb5abd2d6847e5ef100441b
-
SHA1
307865de829a282e806131aec521fcb89ef2c339
-
SHA256
7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038
-
SHA512
34f859338d8fb5609f5cd4e88864f7945e538d8f592c32af30b598ae587e223369bdd8cd964d00d77611c245b28463a59f856910f166441b98ac4bdb24f8e5ba
-
SSDEEP
49152:gIBZ+5lU/VMDWF7TJANOIquGSvO9fEKcrJrCAibc3Wc2SMKdvWv7/:9e5l8IWF7dSFquxvO9CtCdcGRXKdU
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2084 7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2084 7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe"C:\Users\Admin\AppData\Local\Temp\7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2084