Analysis

  • max time kernel
    93s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-10-2024 14:28

General

  • Target

    3b917e751774abfb5d645a31b40aba09a00a4c79624efc6bc323883abdf462aaN.exe

  • Size

    388KB

  • MD5

    8fa54fe3b0f65cb843628f6707919e60

  • SHA1

    68669a3c0f294a4f71b92ea696fd75459faa7d31

  • SHA256

    3b917e751774abfb5d645a31b40aba09a00a4c79624efc6bc323883abdf462aa

  • SHA512

    1b0a1720dd34cfecc54806276c2a50ca6b430d640aa5b1e5675df65c0bab3c0edf6c0d2d6bf184801a1c456cc5ef158c50b0ffd3ba61f8b48041a30143f1ceba

  • SSDEEP

    6144:2838RNOUTa/uEr4OK8O78bhKgzFSy+T6Fij3bLrzJCzE2kfVzEqKS5Vr:2VfOlxEhLGhVpgNr3r0E2cySD

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3b917e751774abfb5d645a31b40aba09a00a4c79624efc6bc323883abdf462aaN.exe
    "C:\Users\Admin\AppData\Local\Temp\3b917e751774abfb5d645a31b40aba09a00a4c79624efc6bc323883abdf462aaN.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: RenamesItself
    PID:1060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1060-0-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB

  • memory/1060-1-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB

  • memory/1060-2-0x00007FF73919A000-0x00007FF7391BE000-memory.dmp

    Filesize

    144KB

  • memory/1060-5-0x00000178CD7B0000-0x00000178CD82B000-memory.dmp

    Filesize

    492KB

  • memory/1060-6-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB

  • memory/1060-4-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB

  • memory/1060-3-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB

  • memory/1060-11-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB

  • memory/1060-10-0x00000178CDBF0000-0x00000178CDBF2000-memory.dmp

    Filesize

    8KB

  • memory/1060-12-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB

  • memory/1060-13-0x00007FF73919A000-0x00007FF7391BE000-memory.dmp

    Filesize

    144KB

  • memory/1060-14-0x00007FF739160000-0x00007FF7391BE000-memory.dmp

    Filesize

    376KB