Analysis
-
max time kernel
137s -
max time network
140s -
platform
windows7_x64 -
resource
win7-en -
submitted
10-09-2021 18:51
Static task
static1
Behavioral task
behavioral1
Sample
core.bat
Resource
win7-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
core.bat
Resource
win10v20210408
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
vessel-64.dat.dll
Resource
win7-en
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
vessel-64.dat.dll
Resource
win10-en
0 signatures
0 seconds
General
-
Target
vessel-64.dat.dll
-
Size
4.5MB
-
MD5
6d912f3cb045cfce88c96f0da2addf3b
-
SHA1
52286ca71ac4239c5e2faad25e569f83ca4b35ee
-
SHA256
7051f30a6b9c7826f017faf69fe52c6e28c71af1ef5e1dbaae9c6f8a885019a7
-
SHA512
e22e4b89a9f7f659d89949b18df93c24087eaffe7e1399d8ca9eaff3a941fa3e2c4945dea03ffa3fb087ffcaa30c9d16bd29ecc7e158b9e5e4c5eccd530312cd
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes:
regsvr32.exepid process 1984 regsvr32.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
regsvr32.exepid process 1984 regsvr32.exe 1984 regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1984-52-0x000007FEFBF01000-0x000007FEFBF03000-memory.dmpFilesize
8KB