Analysis
-
max time kernel
118s -
max time network
239s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
29-11-2022 19:00
Static task
static1
Behavioral task
behavioral1
Sample
MAGIX Vegas Pro 20 build 214 [vacban.wtf]/Setup.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
MAGIX Vegas Pro 20 build 214 [vacban.wtf]/mvp.crack/protein/Protein_x64.4.2.dll
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
MAGIX Vegas Pro 20 build 214 [vacban.wtf]/mvp.crack/vegas200.exe
Resource
win10-20220901-en
General
-
Target
MAGIX Vegas Pro 20 build 214 [vacban.wtf]/mvp.crack/protein/Protein_x64.4.2.dll
-
Size
60KB
-
MD5
9c4d4aeed720e4981dd263d570da7e8e
-
SHA1
287151e3018ea44cf1712422c8e3be2b352632f2
-
SHA256
80243fe0f5ebe22e8fb7770c0cda6e48b9cd7978adf9140bd6bc7f3f9091760c
-
SHA512
dad1ca7f2740904ffc9fdb582dbcdfcdc18f23eb4f045e99875fb32bc6d4e02fc67da5562b3ee2bd0361820bd2de020b039877bc521a42d42b3091e19ba71202
-
SSDEEP
1536:qU68qk9n9cFcVVcfokr59HldDCAfEhAxjj:qJfkwFcbMDzxX
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4700 3852 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\MAGIX Vegas Pro 20 build 214 [vacban.wtf]\mvp.crack\protein\Protein_x64.4.2.dll",#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3852 -s 3922⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3852-115-0x0000000180000000-0x0000000180028000-memory.dmpFilesize
160KB