Analysis

  • max time kernel
    93s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/09/2024, 22:16

General

  • Target

    ClientManager.exe

  • Size

    21.6MB

  • MD5

    0992b1eeef7450b8bc151cfe5a578f61

  • SHA1

    9cb6b223d6fa8f0d29a7fa6e58ff5f757640c780

  • SHA256

    068436912f008a35341b99be12c8af407cfccc4950fec63b59d88c0aa5c431f2

  • SHA512

    4ee7d380c31145601b2031ee1b68ac31ac2eed0d63af7db1615b3dcf92b99e17a3110156ea6ba9ba1e8ba632bfbf8697428cb99183d7977a67a3258e9a2178b7

  • SSDEEP

    393216:p1iF+ktMM+f4V4sbzEcx2/CBfjCBleNo/6gh+Qb7ju6EQYz5gbi:p1Gp+fyNBQCBfjCB0jgzbORQj

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ClientManager.exe
    "C:\Users\Admin\AppData\Local\Temp\ClientManager.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2120

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2120-0-0x00007FF7E660D000-0x00007FF7E7311000-memory.dmp

          Filesize

          13.0MB

        • memory/2120-2-0x00007FFE75240000-0x00007FFE75242000-memory.dmp

          Filesize

          8KB

        • memory/2120-1-0x00007FFE75230000-0x00007FFE75232000-memory.dmp

          Filesize

          8KB

        • memory/2120-6-0x00007FF7E65A0000-0x00007FF7E88B1000-memory.dmp

          Filesize

          35.1MB

        • memory/2120-3-0x00007FF7E65A0000-0x00007FF7E88B1000-memory.dmp

          Filesize

          35.1MB

        • memory/2120-7-0x00007FF7E65A0000-0x00007FF7E88B1000-memory.dmp

          Filesize

          35.1MB

        • memory/2120-8-0x00007FF7E660D000-0x00007FF7E7311000-memory.dmp

          Filesize

          13.0MB

        • memory/2120-9-0x00007FF7E65A0000-0x00007FF7E88B1000-memory.dmp

          Filesize

          35.1MB