Analysis
- max time kernel
84s - max time network
149s - platform
windows10_x64 - resource
win10-en - submitted
10/09/2021, 18:51
General
- Target vessel-64.dat.dll
- Size 4.5MB
- Sample210910-xhm8fadfcm
- SHA256 7051f30a6b9c7826f017faf69fe52c6e28c71af1ef5e1dbaae9c6f8a885019a7
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\vessel-64.dat.dll1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses