Analysis

  • max time kernel
    291s
  • max time network
    298s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    20/06/2024, 22:48

General

  • Target

    61ca0a406a84a3cbcf42c4fa83f213cc7d00adc19c2c70c6514c96d6d1623261.exe

  • Size

    1.3MB

  • MD5

    5a7104532dcc329a8626e6950efa0258

  • SHA1

    d246afe1058aa147b62505a4626ad91021b78784

  • SHA256

    61ca0a406a84a3cbcf42c4fa83f213cc7d00adc19c2c70c6514c96d6d1623261

  • SHA512

    353c35c815843c5afbf0b4d177be9423c298cf9d993f31c00e189f1eb7c5925360d8fa98f01eeaf768f282d1d26b432e2b9c78ff50638081218e8645ee025671

  • SSDEEP

    24576:uMMev9hjfaM7aYb1avzPM56a/no4wQNsiK3LRcglnuBAa:3hj37aYcUMino4l63tIAa

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 29 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\61ca0a406a84a3cbcf42c4fa83f213cc7d00adc19c2c70c6514c96d6d1623261.exe
    "C:\Users\Admin\AppData\Local\Temp\61ca0a406a84a3cbcf42c4fa83f213cc7d00adc19c2c70c6514c96d6d1623261.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2084-0-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-1-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-2-0x00007FFB4E7E0000-0x00007FFB4E9BB000-memory.dmp

    Filesize

    1.9MB

  • memory/2084-4-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-5-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-6-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-7-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-8-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-9-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-10-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-11-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-12-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-13-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-14-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-15-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-16-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-17-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-18-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-19-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-20-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-21-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-22-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-23-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-24-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-25-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-26-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-27-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-28-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-29-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-30-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-31-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-32-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB

  • memory/2084-33-0x00000000012D0000-0x0000000001802000-memory.dmp

    Filesize

    5.2MB