Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 03:26
Static task
static1
Behavioral task
behavioral1
Sample
9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe
Resource
win10v2004-20240226-en
General
-
Target
9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe
-
Size
1.2MB
-
MD5
f0c7a689174e847550c93ec0115ecb7b
-
SHA1
c1d9bafd3915977d57c628c2862a22318404d2a3
-
SHA256
9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4
-
SHA512
c3885fb1d78c41ae408fe70f565a3b9b73c7038ffbd132514d4fd66ea953065dc3c31f9e96d823cde1b152411aca0921a5e6ff3ef16ca869ee55f4051ae49a2e
-
SSDEEP
24576:4AUYfYkP+ASRIt5YRA0JlabDKwbksjK6wpMPN4m2ENbDrapX75xmFB5Hy06Y8Oh9:9dKwbk96woN4m2SPraxfmnhy0DJ7x
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 3032 9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe 3032 9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3032 9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe"C:\Users\Admin\AppData\Local\Temp\9230ba20cc0ca944bf54ae3d2122086f065ea46ed87a9144b2232b5da0735cf4.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:3032