Analysis
-
max time kernel
174s -
max time network
202s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03-12-2022 15:37
General
-
Target
ab62c1004665656aa65c3101cf3852cd09ba646e884cb11ae55cb3c708637d53.exe
-
Size
1.8MB
-
MD5
cea728540f47a7e4cc13d99265e3522e
-
SHA1
ce4711fd55ab3c3cce18b35d25ee17cb5ac88214
-
SHA256
ab62c1004665656aa65c3101cf3852cd09ba646e884cb11ae55cb3c708637d53
-
SHA512
4601b274952c3f43e080c45e4f937e2380eec26918ef8c8e0f9de5d001e12354d0092e528badc1a524b92c26335cde1684a1127e973fc6f91b3d25aa2526a37c
-
SSDEEP
49152:BoFABhHYRnPYl3tdI02vzFfxLzQxbpVFdji3ld:BoDBPYm0wzlVApVvje
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 4 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab62c1004665656aa65c3101cf3852cd09ba646e884cb11ae55cb3c708637d53.exe"C:\Users\Admin\AppData\Local\Temp\ab62c1004665656aa65c3101cf3852cd09ba646e884cb11ae55cb3c708637d53.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
4.4MB