Overview

overview

5

Static

static

3

b4579f2d1e...2d.exe

windows7-x64

5

b4579f2d1e...2d.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    146s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 09:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b4579f2d1eb5d592ec8547ee2fa470a05a44c74a4babb1c043878a39f42e292d.exe

  • Size

    5.6MB

  • MD5

    6678f7862fffefd0c7a908bbe1c0a89e

  • SHA1

    fd2c3d8637a7394834a0b6783232131b33caf68d

  • SHA256

    b4579f2d1eb5d592ec8547ee2fa470a05a44c74a4babb1c043878a39f42e292d

  • SHA512

    02165db930e3c6b6bad684e7de4e98afd7953ffbc782bcb4afd74aefebc114e15f1d0973b4287b17ea9b26abb9ffb11ba25e32fa1bf6d6ddc363fe4f66b7f861

  • SSDEEP

    98304:s4AZAnuKxe4f903r7SpbVSGOlxF8k4lZkmaLk62cawsNg56FAsdqnlyKfaT7v3fl:eAuIel7ehVSxFI1aLUPfBFVKfaX3fKAN

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 37 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b4579f2d1eb5d592ec8547ee2fa470a05a44c74a4babb1c043878a39f42e292d.exe
    "C:\Users\Admin\AppData\Local\Temp\b4579f2d1eb5d592ec8547ee2fa470a05a44c74a4babb1c043878a39f42e292d.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2072-0-0x0000000000400000-0x0000000001227000-memory.dmp

    Filesize

    14.2MB

    Download

  • memory/2072-1-0x0000000077410000-0x0000000077457000-memory.dmp

    Filesize

    284KB

    Download

  • memory/2072-503-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-520-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-556-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-564-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-562-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-560-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-558-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-554-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-552-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-550-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-548-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-546-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-544-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-542-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-540-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-538-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-536-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-534-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-532-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-530-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-528-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-526-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-524-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-522-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-518-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-516-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-514-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-512-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-510-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-508-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-506-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-504-0x0000000003070000-0x0000000003181000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2072-2239-0x0000000002DC0000-0x0000000002F41000-memory.dmp

    Filesize

    1.5MB

    Download