Analysis

  • max time kernel
    154s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2022, 22:36

General

  • Target

    0bdd8180ae56767b3df772ab227f79ae190c62dbf379187782cd35ea2dea9779.exe

  • Size

    73KB

  • MD5

    6f592ea13fb9b7b5322bbe23af2ba390

  • SHA1

    3266ba2299dcdfd4a62458406587de963b72a09d

  • SHA256

    0bdd8180ae56767b3df772ab227f79ae190c62dbf379187782cd35ea2dea9779

  • SHA512

    2fef653987987c00bd58e68a9171fe28e9a8efb130fe1c0b20f670f6c04d8df87340d686d4d4046218e6fd3bd8891d8255a4a65fd5867cc8b38c0b7dec415194

  • SSDEEP

    1536:6ASVYvU/81RTl6o2GR7ulOdTW7t92tzaO4vxgidzd0:CKt1R/2GR7+7tIX4JFdx0

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0bdd8180ae56767b3df772ab227f79ae190c62dbf379187782cd35ea2dea9779.exe
    "C:\Users\Admin\AppData\Local\Temp\0bdd8180ae56767b3df772ab227f79ae190c62dbf379187782cd35ea2dea9779.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1276-132-0x00000000002D0000-0x00000000002ED000-memory.dmp

    Filesize

    116KB