Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 05:10

General

  • Target

    7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe

  • Size

    2.7MB

  • MD5

    d8baebd78eb5abd2d6847e5ef100441b

  • SHA1

    307865de829a282e806131aec521fcb89ef2c339

  • SHA256

    7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038

  • SHA512

    34f859338d8fb5609f5cd4e88864f7945e538d8f592c32af30b598ae587e223369bdd8cd964d00d77611c245b28463a59f856910f166441b98ac4bdb24f8e5ba

  • SSDEEP

    49152:gIBZ+5lU/VMDWF7TJANOIquGSvO9fEKcrJrCAibc3Wc2SMKdvWv7/:9e5l8IWF7dSFquxvO9CtCdcGRXKdU

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe
    "C:\Users\Admin\AppData\Local\Temp\7d782c1847abc9618e1fb18f834394a5db379667c5a77ac32b47c553d7243038.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2084-0-0x0000000000400000-0x0000000000EA2000-memory.dmp

    Filesize

    10.6MB

  • memory/2084-1-0x000000007EBD0000-0x000000007EFA1000-memory.dmp

    Filesize

    3.8MB

  • memory/2084-5-0x00000000003F0000-0x00000000003F1000-memory.dmp

    Filesize

    4KB

  • memory/2084-7-0x000000007EBD0000-0x000000007EFA1000-memory.dmp

    Filesize

    3.8MB

  • memory/2084-6-0x0000000000400000-0x0000000000EA2000-memory.dmp

    Filesize

    10.6MB