Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
07/07/2024, 22:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ececb8cf9b9572194d177dfcf04bacc1.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ececb8cf9b9572194d177dfcf04bacc1.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
General
-
Target
ececb8cf9b9572194d177dfcf04bacc1.exe
-
Size
17.4MB
-
MD5
2e35c910027a4efcb1133d3247b146e4
-
SHA1
badabb1d85624d6b8380d1b2c7bfd0f47aa29610
-
SHA256
e20a540b3319728685a2209c51aaeee663ee6b73268e024d0b73325bc2f53325
-
SHA512
4d1d502fde4fcfb5bcac0f2d902e7f558f67c44c47557fbbce7861e1d0cd78891699ec0823620bfe422a82df89cfd20b5720dbdc4ff8635eff1bfb5fed08345e
-
SSDEEP
393216:4d196AAUJxsQ2EqcfKRBV7bmglq+xEKD7lguFkzsfYDjuowte:yfDJ2CKHVJPBga/YDX
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 2244 ececb8cf9b9572194d177dfcf04bacc1.exe 2244 ececb8cf9b9572194d177dfcf04bacc1.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2244 ececb8cf9b9572194d177dfcf04bacc1.exe