95978fcb67a1110a96f207d752ed46ef5fe0a150247ddd043bc5ae6ed67fc4ac | Triage

Analysis

max time kernel
433s
max time network
435s
platform
windows10-2004_x64
resource
win10v2004-20241007-fr
resource tags

arch:x64arch:x86image:win10v2004-20241007-frlocale:fr-fros:windows10-2004-x64systemwindows
submitted
01/01/2025, 13:21

Sharing

Report Analysis Logs

General

Target

spoofer/Spoofer.exe
Size

9.5MB
MD5

133d9d8901105e6b12d6c6b6bd24dd4a
SHA1

a659f144a5bdc5ac15972da821a1a1fcb095c375
SHA256

e2819114f1167b92939d08b19a4a0feb5997baf62a293b08735eecf863ce4f7c
SHA512

0acae7ae4bfd69fab1d092494bbab8b70c8f407bb2992c8b049b05eccf284f473cb77602e984c9d8a1ab313ad66d44e497b9e1e3ee00744e37df820cd264bed3
SSDEEP

196608:edHWUd/RF+SwgZyBP6v/m6bCJuzOTvbPVauYzIHHSqGJeorUe:edHPJYgZI5688OTvzAmnS9h

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2608	Spoofer.exe

C:\Users\Admin\AppData\Local\Temp\spoofer\Spoofer.exe
"C:\Users\Admin\AppData\Local\Temp\spoofer\Spoofer.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2608-0-0x00007FFE54143000-0x00007FFE54145000-memory.dmp

Filesize
8KB

Download
memory/2608-1-0x000001E316200000-0x000001E31785A000-memory.dmp

Filesize
22.4MB

Download
memory/2608-2-0x000001E317C10000-0x000001E317C11000-memory.dmp

Filesize
4KB

Download