Analysis

  • max time kernel
    92s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-06-2024 09:29

General

  • Target

    25d2723e1d47b87acce5f91bb4f3d026ef236ce300ba5df23dadb9353e729353.exe

  • Size

    2.6MB

  • MD5

    6c5ef97b6a1a6997955d80d925ee7b37

  • SHA1

    d70f0d9b337d64007686fca1a24cd9ce52801b61

  • SHA256

    25d2723e1d47b87acce5f91bb4f3d026ef236ce300ba5df23dadb9353e729353

  • SHA512

    248cf80b09cfa9f5b21a12ad40eaab2ec889cd6e2642e5a9f43d35d5feb4a23526dc2f106295f237a75a21b33052d509d8164a1e2503e39fe8136ac3e618716a

  • SSDEEP

    49152:Z2NI+Q3UkuwDWed32w3tgZqIlm+ICjYn3g8yI1CLNd0gb:ZeI+SU2am32w3NIFPGf0X0g

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\25d2723e1d47b87acce5f91bb4f3d026ef236ce300ba5df23dadb9353e729353.exe
    "C:\Users\Admin\AppData\Local\Temp\25d2723e1d47b87acce5f91bb4f3d026ef236ce300ba5df23dadb9353e729353.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1624-0-0x0000000000400000-0x00000000007EA000-memory.dmp

    Filesize

    3.9MB

  • memory/1624-1-0x0000000000400000-0x00000000007EA000-memory.dmp

    Filesize

    3.9MB

  • memory/1624-2-0x0000000000400000-0x00000000007EA000-memory.dmp

    Filesize

    3.9MB

  • memory/1624-4-0x0000000000400000-0x00000000007EA000-memory.dmp

    Filesize

    3.9MB

  • memory/1624-5-0x0000000000401000-0x00000000004A8000-memory.dmp

    Filesize

    668KB

  • memory/1624-6-0x0000000000400000-0x00000000007EA000-memory.dmp

    Filesize

    3.9MB