Analysis

  • max time kernel
    140s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 18:35

General

  • Target

    33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29.exe

  • Size

    5.3MB

  • MD5

    1e3038a015849df54e1717f19f067259

  • SHA1

    b721aed47b4ea9a95ce7a03ec7e5334fe6a139cb

  • SHA256

    33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29

  • SHA512

    b2332664c21ab8f043b7de6a2fe50448cf81489d7918af7e8aaffd97a8c598057cd09e446075ff3dabc90839504c0ff49f7db9b8ec49de71011fca0cdf801899

  • SSDEEP

    98304:qunWu4HhMNMQEg764hed9kGIuLJZM8NwYj3RzzAyRlP3K2OT2jreQz:5WnHGNxEg76cezkeLJj7lP3E7

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 5 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29.exe
    "C:\Users\Admin\AppData\Local\Temp\33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/364-132-0x0000000000400000-0x0000000000F49000-memory.dmp

    Filesize

    11.3MB

  • memory/364-133-0x0000000000400000-0x0000000000F49000-memory.dmp

    Filesize

    11.3MB

  • memory/364-135-0x0000000000400000-0x0000000000F49000-memory.dmp

    Filesize

    11.3MB

  • memory/364-136-0x0000000000400000-0x0000000000F49000-memory.dmp

    Filesize

    11.3MB

  • memory/364-137-0x0000000000400000-0x0000000000F49000-memory.dmp

    Filesize

    11.3MB