Analysis
-
max time kernel
139s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09-08-2024 19:45
General
-
Target
2921464d60e943eecd345e1854fab260e2d8b8784ef30d6ba09f256e6aa0a335.exe
-
Size
5.7MB
-
MD5
e18201d7d6416f8b9ff0357ed9a39214
-
SHA1
2901e317c23133e7b6f91ca15cdfe68a53fa1c73
-
SHA256
2921464d60e943eecd345e1854fab260e2d8b8784ef30d6ba09f256e6aa0a335
-
SHA512
8b8a6385c36ab8737fa6bef8bebf5051a47d82c188fafc19fb9874b468bb6b3b2ecf0464120b2aac73f3aeef7636d873f50079f9838c25d75780550f80d0a7ed
-
SSDEEP
98304:IWkTMd+cVzUEB4qxwvonRvztDbsM9ZmETqTR9y1oA5hFaNCUoEc6stvvI5U:eTx7EB4qNtfs+TsuoA5DaNCUFstvvaU
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2921464d60e943eecd345e1854fab260e2d8b8784ef30d6ba09f256e6aa0a335.exe"C:\Users\Admin\AppData\Local\Temp\2921464d60e943eecd345e1854fab260e2d8b8784ef30d6ba09f256e6aa0a335.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15.3MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
15.3MB
-
Filesize
2.0MB
-
Filesize
15.3MB
-
Filesize
3.8MB
-
Filesize
2.0MB