Analysis
-
max time kernel
234s -
max time network
268s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27/11/2022, 21:00
General
-
Target
Ѱ1120˺test123456/SKY.dll
-
Size
2.8MB
-
MD5
cc13fc01be4af136e42c2296fb0801ac
-
SHA1
10682bca093fa2e32f9873902ebce2518264f86d
-
SHA256
eabda8bacc9772ef8d528a47fe9d9dcbb589b9a7db410972c3e332346434e7ef
-
SHA512
e42d4f81cdcf9cda52831a8cc59513d6513ecc9454c985280c6003ca4d05af200ab3e56c3273d91f0a85a5fca201fae33c756e344693a0c32f86e845a2ef40fd
-
SSDEEP
49152:UHslDt2okV9wob/fsuY3IOY4Swtus8nBXPVmVP+E0:nJ2okV9wob7Br7s6d
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 4 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Ѱ1120˺test123456\SKY.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Ѱ1120˺test123456\SKY.dll,#12⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
3.0MB