85b5d8e2cfad1e4784e1f647b28cb9dc07ebde75f9ab190aebb4eec2130c636d

Analysis

max time kernel
111s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/09/2024, 23:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9abf70662c97990def737b5cd59c3a50N.exe
Size

5.9MB
MD5

9abf70662c97990def737b5cd59c3a50
SHA1

03e55d3a6ce5ed1b684c63f53f273e1e48ecb304
SHA256

85b5d8e2cfad1e4784e1f647b28cb9dc07ebde75f9ab190aebb4eec2130c636d
SHA512

64d3545f373bfc28193b3f583ecbd7c1c15a6b8e78d04f1e24f221146bd65e25658032ae29dfb5eca097ad5e2b70850ea5192ff0467ab6069713ffd3de98f3ad
SSDEEP

98304:gqZOybAxCtD9enRwjWrVLUMk9OgKf9YPOG/f0oDjf8NfrvwzsV2PkFA0WF8zAYjG:EyckiWjWrV+uVY2Jo/UFTJ28m0OEA

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs

pid	Process
4912	9abf70662c97990def737b5cd59c3a50N.exe
4912	9abf70662c97990def737b5cd59c3a50N.exe
4912	9abf70662c97990def737b5cd59c3a50N.exe
4912	9abf70662c97990def737b5cd59c3a50N.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4912	9abf70662c97990def737b5cd59c3a50N.exe
4912	9abf70662c97990def737b5cd59c3a50N.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
4912	9abf70662c97990def737b5cd59c3a50N.exe

C:\Users\Admin\AppData\Local\Temp\9abf70662c97990def737b5cd59c3a50N.exe
"C:\Users\Admin\AppData\Local\Temp\9abf70662c97990def737b5cd59c3a50N.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
PID:4912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4912-0-0x00007FF763206000-0x00007FF763601000-memory.dmp

Filesize
4.0MB

Download
memory/4912-3-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-2-0x00007FF9A87E0000-0x00007FF9A87E2000-memory.dmp

Filesize
8KB

Download
memory/4912-1-0x00007FF9A87D0000-0x00007FF9A87D2000-memory.dmp

Filesize
8KB

Download
memory/4912-7-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-16-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-18-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-19-0x00007FF763206000-0x00007FF763601000-memory.dmp

Filesize
4.0MB

Download
memory/4912-20-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-21-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-22-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-23-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-24-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-25-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-26-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-27-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-28-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-29-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-30-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-31-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-32-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-33-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-34-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-35-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-36-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-37-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-38-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-39-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-40-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-41-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-42-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-43-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-44-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-45-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-46-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-47-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-48-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-49-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-50-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-51-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-52-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-53-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-54-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-55-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-56-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-57-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-58-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-59-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-60-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-61-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-62-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-63-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-64-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-65-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-66-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-67-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-68-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-69-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-70-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-71-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-72-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-74-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-73-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-75-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-76-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-77-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-78-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-79-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-80-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-81-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-82-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-83-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-84-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-85-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-86-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-87-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-88-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-89-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-90-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-91-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-92-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-93-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-94-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-95-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-96-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-98-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-99-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-100-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-101-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-102-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-103-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-104-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-105-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-106-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-107-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-108-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-109-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-110-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-111-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-112-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-113-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-114-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-115-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-140-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-148-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-149-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-150-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-151-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download
memory/4912-152-0x00007FF763130000-0x00007FF763BEE000-memory.dmp

Filesize
10.7MB

Download