Analysis
-
max time kernel
135s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
25/06/2024, 19:36
General
-
Target
a38d0f77696d9843fb92d8ace590c154f1641891b64764ae04938f68785ad093.exe
-
Size
13.3MB
-
MD5
69a525eaafb81a2bc3ba8c89eb652a42
-
SHA1
5db07bc983ea9ddc2c9070cf011f03c1d322085c
-
SHA256
a38d0f77696d9843fb92d8ace590c154f1641891b64764ae04938f68785ad093
-
SHA512
41caea669c576098809d6003ec133fdb5096134f728eb6b19318210fae78acf675b9f4f6d3cf1b28a8b6515a3343e9008ae81ca63c23aa76249979c26ed9a979
-
SSDEEP
196608:tX4JxepJLo7csYyENuw7TVDEKsSvPnYDBIbFu5mbVVLR6OyPIE:tX4JxepJLo77Yy27TVDEMQGbVN
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a38d0f77696d9843fb92d8ace590c154f1641891b64764ae04938f68785ad093.exe"C:\Users\Admin\AppData\Local\Temp\a38d0f77696d9843fb92d8ace590c154f1641891b64764ae04938f68785ad093.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.9MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
13.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
13.3MB
-
Filesize
3.9MB
-
Filesize
13.3MB