Analysis
-
max time kernel
138s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27-11-2022 06:44
General
-
Target
91vpn(3.5.4)/91vpn/91vpn.exe
-
Size
307KB
-
MD5
3896a09770a42da96db5fbf530903203
-
SHA1
3004cce7e3ca6692dbfb61f40560734c492b6f9b
-
SHA256
bf9001e1c780d0c0f650c4481a3750c30132b8d932c511215e07c631c6cdc658
-
SHA512
9840a2075ea8619b34bbce12224b747fd5789e43796a43d5c82ecddb42a54912d7d4cebd6c3a595d09b23530d6cccd0287f12eb0637d15cb7135d228d6aa1a5a
-
SSDEEP
6144:rzmKnGDcrNkB5HG9QYQM87p+CCZazquuq54t5XPg0gQAAitfGFOyCuXwL5ceeLec:3hnXeLHJYQNiZa2uuq54t5Xo0gQAAity
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Loads dropped DLL 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\91vpn(3.5.4)\91vpn\91vpn.exe"C:\Users\Admin\AppData\Local\Temp\91vpn(3.5.4)\91vpn\91vpn.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
887KB
MD5e1deb8ac5a39ef8d80950908ac6a3cd7
SHA19b9a33c590bb280669dd9dc9eb3132a834bf1f3e
SHA25668114dee6a5c4cedac279cebd22271fccd8678f8f01a4d2fa1a6cdfb4bb3f977
SHA512da7e8c90d3b354bf778152fafd64ff3c87f41681eea4816c09ecf25e81ea638469bdbb17a5ce64c7e9d9f20b9cb7c298fe2f8b37ff26e476a1277e576ee10dc3
-
Filesize
752KB
-
Filesize
752KB