Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25-06-2024 18:50
Static task
static1
Behavioral task
behavioral1
Sample
41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583.exe
Resource
win10v2004-20240508-en
General
-
Target
41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583.exe
-
Size
2.5MB
-
MD5
38217cb710b38b2db6e50c329d0a92fa
-
SHA1
fda6bc9e1cdbc0c0b51bfc1d6c034f154f63ac63
-
SHA256
41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583
-
SHA512
d8574223ba98c7e465fba47b280d4ce50a6b06bfbbb2e53707951c25cc07b31a7b221a0c8b85d821325326d82455e74fb71e34b96cb26653d4a938028ab0e6b2
-
SSDEEP
49152:frmJKHmXXmiw0mEzEQC6Fvw8pyAfQcqFnwL0l2yQIq//znQOqOG8:QZ2iw0msTxTpyW8FwLuc9UOqOX
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2180 41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2180 41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583.exe"C:\Users\Admin\AppData\Local\Temp\41a1d2e501af864b1d9640fb49ec0d80f3d0209e27f43a7e632bf69342f5f583.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2180