Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 17:12

General

  • Target

    bba6f6f924d527766deab2b5f16c01eff33eeda6cfa75f56fcaafefd371f12ca.exe

  • Size

    4.2MB

  • MD5

    b10f5dc831e34fbd60ca2079d3fc9fd5

  • SHA1

    56c173a158cf4b8b38d85bcbf3e28f893e728aa0

  • SHA256

    bba6f6f924d527766deab2b5f16c01eff33eeda6cfa75f56fcaafefd371f12ca

  • SHA512

    42ae2f800c30df006a3315c757c72ce801c63c2a22b9cee06686f135072001f97bc7c39a74a4d2489d6d52b1b14442b7f013c2a499b1667e33771b34ae29afc8

  • SSDEEP

    98304:gTwsKQFdKahu1u2x6TI9F2qHP6YCeGwNg:wwShGu5GboeS

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bba6f6f924d527766deab2b5f16c01eff33eeda6cfa75f56fcaafefd371f12ca.exe
    "C:\Users\Admin\AppData\Local\Temp\bba6f6f924d527766deab2b5f16c01eff33eeda6cfa75f56fcaafefd371f12ca.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1084-0-0x0000000000400000-0x0000000000969000-memory.dmp

    Filesize

    5.4MB

  • memory/1084-1-0x0000000076570000-0x00000000765B7000-memory.dmp

    Filesize

    284KB

  • memory/1084-504-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-506-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-508-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-510-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-518-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-520-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-516-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-514-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-512-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-503-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-522-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-540-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-562-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-526-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-530-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-532-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-534-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-564-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-560-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-558-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-556-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-554-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-552-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-550-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-548-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-546-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-544-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-542-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-538-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-536-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-528-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-524-0x0000000002830000-0x0000000002941000-memory.dmp

    Filesize

    1.1MB

  • memory/1084-7781-0x0000000000400000-0x0000000000969000-memory.dmp

    Filesize

    5.4MB