Analysis
-
max time kernel
435s -
max time network
1711s -
platform
windows10_x64 -
resource
win10-en -
submitted
13-09-2021 11:20
Static task
static1
Behavioral task
behavioral1
Sample
vessel-64.dat.dll
Resource
win10-en
windows10_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
core.bat
Resource
win10v20210408
windows10_x64
0 signatures
0 seconds
General
-
Target
vessel-64.dat.dll
-
Size
4.5MB
-
MD5
6d912f3cb045cfce88c96f0da2addf3b
-
SHA1
52286ca71ac4239c5e2faad25e569f83ca4b35ee
-
SHA256
7051f30a6b9c7826f017faf69fe52c6e28c71af1ef5e1dbaae9c6f8a885019a7
-
SHA512
e22e4b89a9f7f659d89949b18df93c24087eaffe7e1399d8ca9eaff3a941fa3e2c4945dea03ffa3fb087ffcaa30c9d16bd29ecc7e158b9e5e4c5eccd530312cd
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes:
regsvr32.exepid process 3976 regsvr32.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes:
regsvr32.exepid process 3976 regsvr32.exe 3976 regsvr32.exe 3976 regsvr32.exe 3976 regsvr32.exe