Analysis
- max time kernel
141s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
12/06/2024, 04:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe
Resource
win10v2004-20240611-en
2 signatures
150 seconds
General
- Target 2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe
- Size 2.6MB
- Sample240612-fetsda1drf
- SHA256 2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b
- MD5 fd3f61fa8e2399b2bbfee13153a3ad84
- SHA1 31cd10f40b83103de4206143a4bcf6f01c0b12aa
- SHA512 59b509e3e2b5bf69b5b69a0646871d3e77013603a4f6b73351d44e6b1386443040ba662d7c46ddec29334189fbfe546b1d473274282889c343cc7ffe8b3eef71
- SSDEEP 49152:eLeCklDz30l5uHvi4ZrOGJAIuZVsZwxSMulAtM8fDbi0K2hJJ:eLeCkRb0HuHq+rOcuZV3SlAtM8fDU2hJ
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4720 2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4720 2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe"C:\Users\Admin\AppData\Local\Temp\2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:4720