Analysis
-
max time kernel
38s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
07/11/2022, 03:47
General
-
Target
28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731.exe
-
Size
688KB
-
MD5
0cdd8d1d2925a99e130ba43106d190e0
-
SHA1
67ad628a010f3de62a0a75d9cba9887aba498580
-
SHA256
28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731
-
SHA512
b27244ba4ea311ea544cedcde775dde6c92a7b60998b87a7ba3c7e712b77d25a67089359ba41f4030549073becbc4768f25c48d7a5169cc058a1bf25f08f2f52
-
SSDEEP
12288:a72CqvKRN7yo7SYDUWnwo18CusrZLVHWaGAbXs1Go9BEq/nyjNCQ9Psudam6:I6a7pSun3tbrJhGArKLwQyjFim6
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731.exe"C:\Users\Admin\AppData\Local\Temp\28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
8KB
-
Filesize
2.5MB