Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
28/10/2022, 22:26
General
-
Target
bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b.exe
-
Size
552KB
-
MD5
0cd33be1333d9d0b750c2f8ef75d8e60
-
SHA1
572ad9f3ec16962f9343c950a96d1e2064acdf52
-
SHA256
bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b
-
SHA512
32228f3bf0ce50a4b6d0df48258e6670a2c56e47b23442e6ddb7973bce2813df1bc2d666f3e25b6f140a0e05c54dd35aae20c6f6d90d0d445d0563c6241a62f6
-
SSDEEP
12288:/uLY8VilZaEPVVeDWIuj4K1TIisvMLtbQxDO15WXUT6:/u08VilsEPeDWcKGiTdUO15WkT6
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b.exe"C:\Users\Admin\AppData\Local\Temp\bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
8KB
-
Filesize
2.2MB