Overview

overview

8

Static

static

8

6dca036408...fd.exe

windows7-x64

8

6dca036408...fd.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    203s
  • max time network
    210s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 16:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6dca036408d20af17fa6881ecd82c28f45df0b9360a979bc9f1da30cbaaa21fd.exe

  • Size

    124KB

  • MD5

    515084e83adacf1a282f03db6f249b08

  • SHA1

    2332ab3ba5905e24a86bfb175fe17284fcd669fc

  • SHA256

    6dca036408d20af17fa6881ecd82c28f45df0b9360a979bc9f1da30cbaaa21fd

  • SHA512

    f7de9dd677d13a0e75f6b51cff4c9986c1dd918276f9d62f188ee357062235770978f64d4f6da0901aa83c29f7c65c5ecf231a0719f554f1b847b10e704ab8e8

  • SSDEEP

    3072:ugLTU+h7F4WVF9F669XtSNN2/yf9xghcsb:ugJhZ4WVF9F669XSwyFDK

Score
8/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 4 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Processes

  • C:\Users\Admin\AppData\Local\Temp\6dca036408d20af17fa6881ecd82c28f45df0b9360a979bc9f1da30cbaaa21fd.exe
    "C:\Users\Admin\AppData\Local\Temp\6dca036408d20af17fa6881ecd82c28f45df0b9360a979bc9f1da30cbaaa21fd.exe"
    1⤵
      PID:4676

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4676-132-0x0000000000400000-0x0000000000453000-memory.dmp
      Filesize

      332KB

      Download
    • memory/4676-133-0x0000000000400000-0x0000000000453000-memory.dmp
      Filesize

      332KB

      Download
    • memory/4676-134-0x0000000000400000-0x0000000000453000-memory.dmp
      Filesize

      332KB

      Download
    • memory/4676-135-0x0000000000400000-0x0000000000453000-memory.dmp
      Filesize

      332KB

      Download