Analysis
-
max time kernel
15s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06-09-2024 08:42
General
-
Target
c3f7af5ab1ab7f8559e631b8ee7c6640N.exe
-
Size
7.6MB
-
MD5
c3f7af5ab1ab7f8559e631b8ee7c6640
-
SHA1
c123d716f53ac9d5aa1d8012763d0e796d578cb3
-
SHA256
aac8e77ba87c0216f16788bd99feb856a09f5f8ee986453c5e0572803d94965c
-
SHA512
86d2861885956c8dc913a68a8221d226c16736786fe032ff5e7ca8f1de66925225027dd0fb28047e381e942896089e98cb25cd3a9a533a19bb342c6e0cc94b2b
-
SSDEEP
196608:WLmtW2uzSqCnVOn2nlDizlqi6iOSHFlUZOJvuWBQa8WiL:WCtW2uzMnVOnUDizYiWglUqGphl
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 12 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 22 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c3f7af5ab1ab7f8559e631b8ee7c6640N.exe"C:\Users\Admin\AppData\Local\Temp\c3f7af5ab1ab7f8559e631b8ee7c6640N.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
8KB
-
Filesize
22.2MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
22.2MB
-
Filesize
22.2MB
-
Filesize
2.2MB
-
Filesize
22.2MB
-
Filesize
22.2MB
-
Filesize
22.2MB