Analysis

  • max time kernel
    147s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 09:27

General

  • Target

    64841a275dcad7042cb2007a02064c5676481a979978e15490d31be1d2569e55.exe

  • Size

    5.6MB

  • MD5

    a19cef077ad97e32f47603083bae4f78

  • SHA1

    f0b11b141e35efe0d406e53d1046e60980219876

  • SHA256

    64841a275dcad7042cb2007a02064c5676481a979978e15490d31be1d2569e55

  • SHA512

    8ee8d85e176733a6cbaeaf1fd26554d550e7079cebde5d94baab9924eddde7a8ad5df87291625ab41bcce0ba4a0485ee9b4712d5c1cea9842a19224902fac939

  • SSDEEP

    98304:z4YFvoGCmgdAN96tc92Q4J02qbjIkCOhrz50ydf6xN83Zc7S4qP5n:zpx+ANac92Qi0vjIkCEFckpk3k5n

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 37 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\64841a275dcad7042cb2007a02064c5676481a979978e15490d31be1d2569e55.exe
    "C:\Users\Admin\AppData\Local\Temp\64841a275dcad7042cb2007a02064c5676481a979978e15490d31be1d2569e55.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2848-0-0x0000000000400000-0x0000000000ABB000-memory.dmp

          Filesize

          6.7MB

        • memory/2848-1-0x0000000076560000-0x00000000765A7000-memory.dmp

          Filesize

          284KB

        • memory/2848-504-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-506-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-510-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-512-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-514-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-520-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-518-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-516-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-508-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-503-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-522-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-524-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-528-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-538-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-548-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-561-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-540-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-564-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-562-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-558-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-556-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-554-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-552-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-550-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-546-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-544-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-542-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-536-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-534-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-532-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-530-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB

        • memory/2848-526-0x00000000026B0000-0x00000000027C1000-memory.dmp

          Filesize

          1.1MB