Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
18/06/2024, 16:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe
Resource
win7-20240508-en
2 signatures
150 seconds
General
-
Target
f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe
-
Size
1.3MB
-
MD5
89335661cc583b05c79dab42b6d35ad2
-
SHA1
9e342d148e7a0d448d2b7c93eaed88baeb6b3a51
-
SHA256
f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c
-
SHA512
3cf50c85722f9d01d11083781b6dcc10f94011e0bc9879d3e0d9e7308828bd097f734730f3e51382641e8f9a611a283e9d0228f5b5e2d564edd17d7b4c8f3acd
-
SSDEEP
24576:VJBR8kj1mjks77XZ9vg9GjnKfwtDtWWcDxQTwQVRHW/nSTpY9ToU8oP7:VXR8AkHZ9Y9GeiDt/cD2TlVR2/STGhos
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
pid Process 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2976 f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe"C:\Users\Admin\AppData\Local\Temp\f7f0f9271c92d5401ef7a98d6e295c9b0b9d76e63d35b530b15831ac429b916c.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2976