Analysis
-
max time kernel
154s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
02-05-2022 18:22
General
-
Target
0da182d4a35ca4c180e55b48895b16abc1d94b1d464b726c5018d6ff847e3116.exe
-
Size
432KB
-
MD5
9fbcc7ee6dd506ce3fbe3fdf60a1a98a
-
SHA1
073849e1716fb74022c2465f9aa06e064c4ea63e
-
SHA256
0da182d4a35ca4c180e55b48895b16abc1d94b1d464b726c5018d6ff847e3116
-
SHA512
bbfb70dd42ddd5201bd6fd4871b42f311d99fcb93cb9b576407073ec8b1b8a46374b3b8d7cd527dfa94f4bfe6c91d7419392236bf9a9f0fbce13170e444e89d1
Score
10/10
Malware Config
Signatures
-
Generic Chinese Botnet
A botnet originating from China which is currently unnamed publicly.
-
Chinese Botnet Payload 1 IoCs
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0da182d4a35ca4c180e55b48895b16abc1d94b1d464b726c5018d6ff847e3116.exe"C:\Users\Admin\AppData\Local\Temp\0da182d4a35ca4c180e55b48895b16abc1d94b1d464b726c5018d6ff847e3116.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB