Analysis

  • max time kernel
    95s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/09/2024, 17:55

General

  • Target

    e3e519958a933b8c6fc24b22c7faaac0N.exe

  • Size

    2.0MB

  • MD5

    e3e519958a933b8c6fc24b22c7faaac0

  • SHA1

    76ae084e470c1888253f23083677b49021eddd74

  • SHA256

    34491faeaa05b9f89da854c49b64f1a17f8629c6a5ad811c5976cc4722473c83

  • SHA512

    54b6a7e47894efb2b233d0bab03996db4be240d17552356d7d161b162eb0adedb7e03d21248755d39239ce24b9510848179c78292a33a5d600061f7a51e30a97

  • SSDEEP

    24576:Rq+Vps7EzQbY2rh+09ZDWghu5V8Me+BT0ay4EAN0rb3nYm1kH9Jzbm25mIY+9O5e:nVG7MQbTrD9FhjM7fy9drznd1c9Ju

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3e519958a933b8c6fc24b22c7faaac0N.exe
    "C:\Users\Admin\AppData\Local\Temp\e3e519958a933b8c6fc24b22c7faaac0N.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:3788

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3788-0-0x00007FFDE98C3000-0x00007FFDE98C5000-memory.dmp

          Filesize

          8KB

        • memory/3788-1-0x000001CAD2EA0000-0x000001CAD31AC000-memory.dmp

          Filesize

          3.0MB

        • memory/3788-2-0x000001CAD36E0000-0x000001CAD36E1000-memory.dmp

          Filesize

          4KB