59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
30-06-2024 03:25

Target

59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13.exe
Size

6.2MB
MD5

9bbc354bbeda9e8a013870fb31beab82
SHA1

18ad157cf60eef09ddec84a4fc3ac96e1babd55d
SHA256

59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13
SHA512

677e3653cf9a48231280fce816bbff9b2c1e6d681a66e9fc8c44c40c4ed0110b9cb89e4e684f466647c4f144dc16433e86d05e2e1fb10e4d51cb5a4385ea2902
SSDEEP

98304:Vrj9uls01U197t3ZD9uIw4vnphcY8YIxR04SR8wiHSfA93q:VP197t3R95pKBGRa3

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes:

59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13.exe

pid process

4076 59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13.exe

pid	process
4076	59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13.exe

C:\Users\Admin\AppData\Local\Temp\59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13.exe
"C:\Users\Admin\AppData\Local\Temp\59a9dc1c04630bcaeacaa3a043c85220ed35092a58304cb509ff72b192327c13.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4076