Analysis
-
max time kernel
34s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-09-2024 01:34
General
-
Target
balastru2.exe
-
Size
7.3MB
-
MD5
a6a8d1d543e338cf5739a066f1ccb988
-
SHA1
375b231a09016faaeb46770d96678c74697778ec
-
SHA256
9ddef5f098a2d2655f59a875b129ebfa1aa5fefa37bc4590daba4814df99c11b
-
SHA512
7ceb91d9bdec73e6ab3a894e3724facab3f2af41de60c3550c9dbbb593c71d1f9cf16451caf1c542da327bb90e6e7eb518a043ad2a7b275835bac3f3a917502a
-
SSDEEP
196608:mLfAjVdrugdQZC4sry14NxQX2gp5vYQrb4lXjBhazs:q4rQZC4KleplYQrmf
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\balastru2.exe"C:\Users\Admin\AppData\Local\Temp\balastru2.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.2MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
14.9MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
14.9MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
564KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
564KB
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
14.9MB
-
Filesize
7.2MB
-
Filesize
14.9MB