Analysis

  • max time kernel
    294s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 22:39

General

  • Target

    2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe

  • Size

    1.3MB

  • MD5

    0b1e103954d548c038552f0f7ca05b44

  • SHA1

    d969b32b6af59417c603a8e79f35fa0d0b7f6b3d

  • SHA256

    2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899

  • SHA512

    ad821e76899a59956a4aeab072abbb66fad0cac437a54979dff472017668bbd306fdeb803c58c0d2987b25101c11a88730d2c9a86f6dd38d57a03c883ef9ba57

  • SSDEEP

    24576:K5OjvoNby5WcISAAlPvKTaBmXGD6aWvalwQL6icoEC5hD3F89hbmSK:Ljsy5nISpPKaBsvallCoEQhTYbm

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 30 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe
    "C:\Users\Admin\AppData\Local\Temp\2ce76975cef54c6edb7424a6dc4e8caf11804bca8c605fb87af875e94fd4d899.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2456-0-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-2-0x00000000015C4000-0x0000000001662000-memory.dmp

    Filesize

    632KB

  • memory/2456-1-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-4-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-5-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-6-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-7-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-8-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-9-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-10-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-11-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-12-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-13-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-14-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-15-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-16-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-17-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-18-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-19-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-20-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-21-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-22-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-23-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-24-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-25-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-26-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-27-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-28-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-29-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-30-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-31-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-32-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB

  • memory/2456-33-0x0000000001130000-0x0000000001662000-memory.dmp

    Filesize

    5.2MB