Analysis
-
max time kernel
294s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
20/06/2024, 22:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe
Resource
win7-20240611-en
2 signatures
300 seconds
General
-
Target
2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe
-
Size
1.3MB
-
MD5
0b1e103954d548c038552f0f7ca05b44
-
SHA1
d969b32b6af59417c603a8e79f35fa0d0b7f6b3d
-
SHA256
2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899
-
SHA512
ad821e76899a59956a4aeab072abbb66fad0cac437a54979dff472017668bbd306fdeb803c58c0d2987b25101c11a88730d2c9a86f6dd38d57a03c883ef9ba57
-
SSDEEP
24576:K5OjvoNby5WcISAAlPvKTaBmXGD6aWvalwQL6icoEC5hD3F89hbmSK:Ljsy5nISpPKaBsvallCoEQhTYbm
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 30 IoCs
pid Process 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2456 2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe"C:\Users\Admin\AppData\Local\Temp\2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2456