Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    07/07/2024, 22:00

General

  • Target

    ececb8cf9b9572194d177dfcf04bacc1.exe

  • Size

    17.4MB

  • MD5

    2e35c910027a4efcb1133d3247b146e4

  • SHA1

    badabb1d85624d6b8380d1b2c7bfd0f47aa29610

  • SHA256

    e20a540b3319728685a2209c51aaeee663ee6b73268e024d0b73325bc2f53325

  • SHA512

    4d1d502fde4fcfb5bcac0f2d902e7f558f67c44c47557fbbce7861e1d0cd78891699ec0823620bfe422a82df89cfd20b5720dbdc4ff8635eff1bfb5fed08345e

  • SSDEEP

    393216:4d196AAUJxsQ2EqcfKRBV7bmglq+xEKD7lguFkzsfYDjuowte:yfDJ2CKHVJPBga/YDX

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ececb8cf9b9572194d177dfcf04bacc1.exe
    "C:\Users\Admin\AppData\Local\Temp\ececb8cf9b9572194d177dfcf04bacc1.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2244-2-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2244-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2244-4-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/2244-8-0x0000000000485000-0x00000000011F9000-memory.dmp

    Filesize

    13.5MB

  • memory/2244-9-0x0000000000400000-0x0000000002363000-memory.dmp

    Filesize

    31.4MB

  • memory/2244-5-0x0000000000400000-0x0000000002363000-memory.dmp

    Filesize

    31.4MB

  • memory/2244-11-0x0000000000400000-0x0000000002363000-memory.dmp

    Filesize

    31.4MB