Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/07/2024, 09:12

General

  • Target

    NXYEdgeService.exe

  • Size

    355KB

  • MD5

    e7a6b7c8398b00a009eef67844539e72

  • SHA1

    9bf746c47b00df4ff4f4818010be0d6b16a7f5ad

  • SHA256

    76679bedf2c5959c700796902deea745bf3b567466216fcfaf12d8692b5c85a2

  • SHA512

    fd94a4f94051aa103db9077cf0c0a533811dd9f4c6046401a5bc4ffd93199f7cd6303237cb77dce0565ab35fdd2e78786b28e0aaad5b367db7750513b26a915b

  • SSDEEP

    6144:0L7a/neL1hvT45VRsHo3LKZQkQsKHYq2tTZsFf5DkKnoGptdue2N4awed280:Y4eL3U53sHuOQkQsKHH1znBtdun2awey

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NXYEdgeService.exe
    "C:\Users\Admin\AppData\Local\Temp\NXYEdgeService.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2576-0-0x0000000000180000-0x000000000022E000-memory.dmp

    Filesize

    696KB

  • memory/2576-1-0x0000000000180000-0x000000000022E000-memory.dmp

    Filesize

    696KB

  • memory/2576-3-0x0000000000180000-0x000000000022E000-memory.dmp

    Filesize

    696KB