a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
29/05/2024, 01:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe
Size

15.9MB
MD5

d34543709ef08c5aea51de970f127c28
SHA1

68ceaebe43a026bc1bacdadcce06b85a31b1d6cc
SHA256

a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692
SHA512

0c3ce963087910163a04ffa48477bffb15704877ce1b310771c79c211f23e5da85ee6a59625efe7ba988de07223853a34316d2e48e626f149e9e22e7958ce34f
SSDEEP

393216:ZxEQVL4B6sSl+9+oKSlxrFfX6N9TtLV74lfHDNKO1L7VhF9qL13dB6hGZD:ZxE0L4BzSlHoKoTC9zqkOFHF8LXRD

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1776	a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe
1776	a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1776	a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1776	a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe
1776	a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe

C:\Users\Admin\AppData\Local\Temp\a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe
"C:\Users\Admin\AppData\Local\Temp\a91aaf5647f829b2c0336d8958d093d6d7e5cac520ace20b60bb1e0b5cb8d692.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1776-0-0x000000000090A000-0x000000000142C000-memory.dmp

Filesize
11.1MB

Download
memory/1776-40-0x0000000000360000-0x0000000000361000-memory.dmp

Filesize
4KB

Download
memory/1776-41-0x0000000000400000-0x0000000002411000-memory.dmp

Filesize
32.1MB

Download
memory/1776-44-0x0000000000400000-0x0000000002411000-memory.dmp

Filesize
32.1MB

Download
memory/1776-45-0x0000000000400000-0x0000000002411000-memory.dmp

Filesize
32.1MB

Download
memory/1776-38-0x0000000000360000-0x0000000000361000-memory.dmp

Filesize
4KB

Download
memory/1776-35-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download
memory/1776-33-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download
memory/1776-30-0x0000000000330000-0x0000000000331000-memory.dmp

Filesize
4KB

Download
memory/1776-28-0x0000000000330000-0x0000000000331000-memory.dmp

Filesize
4KB

Download
memory/1776-25-0x0000000000320000-0x0000000000321000-memory.dmp

Filesize
4KB

Download
memory/1776-23-0x0000000000320000-0x0000000000321000-memory.dmp

Filesize
4KB

Download
memory/1776-20-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1776-18-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1776-16-0x0000000000310000-0x0000000000311000-memory.dmp

Filesize
4KB

Download
memory/1776-15-0x0000000000300000-0x0000000000301000-memory.dmp

Filesize
4KB

Download
memory/1776-13-0x0000000000300000-0x0000000000301000-memory.dmp

Filesize
4KB

Download
memory/1776-11-0x0000000000300000-0x0000000000301000-memory.dmp

Filesize
4KB

Download
memory/1776-10-0x00000000002F0000-0x00000000002F1000-memory.dmp

Filesize
4KB

Download
memory/1776-8-0x00000000002F0000-0x00000000002F1000-memory.dmp

Filesize
4KB

Download
memory/1776-6-0x00000000002F0000-0x00000000002F1000-memory.dmp

Filesize
4KB

Download
memory/1776-5-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/1776-3-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/1776-1-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/1776-46-0x0000000010000000-0x00000000101BB000-memory.dmp

Filesize
1.7MB

Download
memory/1776-50-0x000000000090A000-0x000000000142C000-memory.dmp

Filesize
11.1MB

Download
memory/1776-51-0x0000000000400000-0x0000000002411000-memory.dmp

Filesize
32.1MB

Download