Analysis
-
max time kernel
142s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2024 03:50
Static task
static1
Behavioral task
behavioral1
Sample
7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe
Resource
win10v2004-20240508-en
General
-
Target
7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe
-
Size
1.3MB
-
MD5
2b73fc0d060261a5b10d6ae9befa9971
-
SHA1
cf333b92396ad6149224b3f96e3d55c02c1362f0
-
SHA256
7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe
-
SHA512
5ec26fcaa9e88a48e31b424943e8bee01afa624559ece8a68a23a508cb5a7dc31facc5cd49cde43586fe1b6d026e53a1c2d4eef7bcea0122dda27b3328edbeb7
-
SSDEEP
24576:+8AxwjemyxgBq6Cvi3L3PwYcwQKsiK3/T+dk:+8Axwje5GqHipcl33/T
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
Processes:
7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exepid process 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exepid process 2824 7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe"C:\Users\Admin\AppData\Local\Temp\7510ae911623d3ff65919eb760da36a29d44f4b9e3886a65973b0ed914eaa0fe.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2824
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2824-2-0x0000000001424000-0x00000000014C2000-memory.dmpFilesize
632KB
-
memory/2824-1-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-4-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-5-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-6-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-7-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-8-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-9-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-10-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-11-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-12-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-13-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-14-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-15-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-16-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-17-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB
-
memory/2824-18-0x0000000000F90000-0x00000000014C2000-memory.dmpFilesize
5.2MB