Analysis
-
max time kernel
218s -
max time network
237s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
26-11-2022 18:02
General
-
Target
1433_hack44.cn/NB12-18/MD5修改器.exe
-
Size
772KB
-
MD5
0f2afa364b5e02702107f085571e3567
-
SHA1
e00113a6ecca4731a3b762cd81f66c3376f71be4
-
SHA256
0175b727c7e2eb62461878ce3788616b1cefcfd44f61559924fd6ddbd48c1ec0
-
SHA512
b03bb984fc80499f07499417d915ddb95bbd28616f49915401435e7b7e1518b1868659c28abbe7cac24cc10e80c1b2883be5343c5fbd4c2e2b6a596f35ae1be1
-
SSDEEP
24576:69OAfvjaPIxCHjvnpoAbrK2wz4A94Has:causvnpfOiA94Ha
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1433_hack44.cn\NB12-18\MD5修改器.exe"C:\Users\Admin\AppData\Local\Temp\1433_hack44.cn\NB12-18\MD5修改器.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
1.2MB