Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 04:42
Static task
static1
Behavioral task
behavioral1
Sample
23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe
Resource
win10v2004-20240508-en
General
-
Target
23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe
-
Size
8.3MB
-
MD5
448632e9fb5f470adfbf7f3e4934cb6c
-
SHA1
41c4bd50c73bf3bd787d2546c4cf0760fd10657c
-
SHA256
23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec
-
SHA512
526b3442c8ddea1de798107761f5b5d065c7a87af8c11811941135a3f7e0225497d280436bf1c1172f384432d5a3c71ea8a5abb97a2ab8be811815d4b3ddd412
-
SSDEEP
196608:QFNUTh4idxJ+XEcUSQcEPOaT/R6x6NIIrnuYLm8WnoQvLrg1zC:hlxs0c99aS6OIrnmtnpLU1zC
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
pid Process 2416 23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe 2416 23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe 2416 23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2416 23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe"C:\Users\Admin\AppData\Local\Temp\23385f974213c1b5b1761857a184c634251ff379e8588e676efd1ead46fbb4ec.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:2416