Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-10-2024 22:52
General
-
Target
BLTools v2.9 PRO/BLTools v2.9 PRO.exe
-
Size
3.2MB
-
MD5
8c949c1a3189fc8845f22295ee72a150
-
SHA1
1df3585b887e077251008c68f233f128c08b0b74
-
SHA256
53b6b47c5dbfbb8ea17990309e9549acc44d8b5d4b1c9e76ec754653f5d31870
-
SHA512
b27d485b3cd4633edb245659c581458f20b67859f4e7d02205a68824d41dd216882989a807c01d5468e3f99beb78850fa7aeb217f7b8ac8ad30f3a652fc24066
-
SSDEEP
98304:Q8LdJUraeZZi032nwpT0LtehhSlwz5i6/GroQ:QwU+eXii2wpILtehhSluiWG
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\BLTools v2.9 PRO\BLTools v2.9 PRO.exe"C:\Users\Admin\AppData\Local\Temp\BLTools v2.9 PRO\BLTools v2.9 PRO.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
7.2MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
144KB
-
Filesize
128KB
-
Filesize
9.2MB
-
Filesize
320KB
-
Filesize
384KB
-
Filesize
5.6MB
-
Filesize
1.3MB
-
Filesize
744KB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
56KB
-
Filesize
7.7MB
-
Filesize
224KB
-
Filesize
72KB
-
Filesize
32KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB