Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25-06-2024 20:46
Static task
static1
Behavioral task
behavioral1
Sample
88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe
Resource
win10v2004-20240508-en
General
-
Target
88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe
-
Size
9.3MB
-
MD5
60b1f617f9f24e287d25ca621503d2b9
-
SHA1
24b90dfa5bd4e8b72b264bf4020515108ffa3d26
-
SHA256
88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670
-
SHA512
9b0e9def86f2007735f1f896d30c03c60672118866e50ac497260ad4f229a8e1cbc461325383c7700420c1670b12543775592de5874ae2d4026a3f91acc0d5b3
-
SSDEEP
196608:nZoi1sN+J7Dq75Sl+huWSrXYABwRt7Kiesad+Z:nZf1g74bWMoFRNWsa
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1792 88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1792 88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe 1792 88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1792 88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe 1792 88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe"C:\Users\Admin\AppData\Local\Temp\88e124eca8026d7b891da5de273c2ebce6a916bfd983815c583c0d4a0ad3f670.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1792