Analysis
-
max time kernel
144s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 04:05
Static task
static1
Behavioral task
behavioral1
Sample
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe
Resource
win10v2004-20240709-en
General
-
Target
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe
-
Size
4.9MB
-
MD5
44b23559592888d2a1647da3d98a7fb5
-
SHA1
cb8e631667a386b40c734571b3cbf723b179d985
-
SHA256
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f
-
SHA512
0cbc8d8593180baff4b42fb4fac24310bf5fca5da48afdd58a7e9fea8e2f1b3e29890f7c8797f2c44a7ee07f8d953642939132b859a730452e02e2a80216e80f
-
SSDEEP
49152:C/A911b0PiEF94uyc3ZZOHcJW/d9hmtR5v4zI5gp41pFAGhUqicFIRRR3TFU8cib:C/u1APiEwi3uJ/zAZVdhU8ITLGn4G5A
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
pid Process 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2228 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe"C:\Users\Admin\AppData\Local\Temp\2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:2228