Analysis
-
max time kernel
225s -
max time network
334s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
25-11-2022 03:29
General
-
Target
782c389b44e8609203175c4eb4ddb56c.exe
-
Size
11.6MB
-
MD5
782c389b44e8609203175c4eb4ddb56c
-
SHA1
1ef8c0aed0abd7f09c19070f2b3a43f94851239d
-
SHA256
2311621ee2fdaa48531b6b89c77683da6e713aa59f38d43d487accd155029aa1
-
SHA512
cc7110b85e491f7296ac80d6a68149c8f8f25dcd4b1e254589f06100d862e97d8a36e1c33483c296bedc07f5bf710803bb41b30b8acdb675d6418337d00f9852
-
SSDEEP
196608:XyZ5tbMJg6Xo+aKw5D2lAWdesnhjNr04v8oVZcUcJJS8ThxoGocdMM5S:YIFXoP/DZgesnxWm1CS8NxoGoT
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\782c389b44e8609203175c4eb4ddb56c.exe"C:\Users\Admin\AppData\Local\Temp\782c389b44e8609203175c4eb4ddb56c.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 288 -s 4642⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
8KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
6.5MB
-
Filesize
6.5MB
-
Filesize
6.5MB
-
Filesize
252KB
-