Analysis
-
max time kernel
145s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
17-06-2024 02:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe
Resource
win7-20240611-en
windows7-x64
2 signatures
150 seconds
General
-
Target
4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe
-
Size
1.3MB
-
MD5
8ba2edb1c1cbc3a5e2d493737b95023c
-
SHA1
d40afaf7d79ccbcacd07d717baa036dbc5735a5f
-
SHA256
4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1
-
SHA512
6753db224c2e1e51976c70e61d3a2b8985a79d8d51675a8ac49176e6acfdece514cdc71d24ae1a0bd3017d4721eeffb81f49de76ac7317967892db7c1287b73f
-
SSDEEP
24576:0+LBbHYoxG99ma+09ev4/QwQgN2K3yWds0JkKyVGNnQ3v0lvp:00DG99HdR/QlVadsLoNQcx
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
pid Process 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1916 4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe"C:\Users\Admin\AppData\Local\Temp\4fc628d820ef580fd3c68018c98734b0df82863622eca1670e465a4c3b40ccd1.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:1916