Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2024, 05:05
Static task
static1
Behavioral task
behavioral1
Sample
98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe
Resource
win10v2004-20240704-en
General
-
Target
98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe
-
Size
15.2MB
-
MD5
d3262e2ff0d487895343844f3462b33e
-
SHA1
ff220ee196a0e7e19cf1d94dcf4fb3e573e2dfdb
-
SHA256
98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621
-
SHA512
e9b16e31304bfc09946d02ed82036e2ab3a129a3c16f2200ecaa2486add4d66cfb1be030127874516db01d4194a2746c8912a25fcd1b6d65f398e31ba0409448
-
SSDEEP
393216:Usn0BBsruQZ9vOZ+uJb7GMprnEiFPc3a55U4hf:L03sruQP0+KLEec3qm4h
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 3276 98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe 3276 98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3276 98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe 3276 98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe"C:\Users\Admin\AppData\Local\Temp\98e74550d2e533e60affb8b869a6a7608fb9887c81804c8424ab205a5edb4621.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:3276