Analysis

  • max time kernel
    47s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06-12-2022 12:46

General

  • Target

    e910bd280867d5011b1517ad9b64ffa8c468078920b4cb989abc28d4eb353e10.exe

  • Size

    129KB

  • MD5

    2b1e2741d15d3a04240707cb51bf842f

  • SHA1

    a50fca2f6642551016ed13e24bf39791f5701911

  • SHA256

    e910bd280867d5011b1517ad9b64ffa8c468078920b4cb989abc28d4eb353e10

  • SHA512

    6de3f5e424ab2bff5b8d1f4b4b1496418ca6796ccd4dae38f3ee42b722708bd66fd2830477be30ec1865a482cce5c1ecdc63622437c3184b7208bd7cf20460dd

  • SSDEEP

    3072:pfQHZIH4c/iU9kvheQtc9iar/rYYxMW2oQ/+TTNgN8ROSD/0Jqt:WIH4cajt0dPYtKO8n/0Jqt

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e910bd280867d5011b1517ad9b64ffa8c468078920b4cb989abc28d4eb353e10.exe
    "C:\Users\Admin\AppData\Local\Temp\e910bd280867d5011b1517ad9b64ffa8c468078920b4cb989abc28d4eb353e10.exe"
    1⤵
      PID:2016

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2016-54-0x0000000000401000-0x0000000000405000-memory.dmp

      Filesize

      16KB

    • memory/2016-55-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

    • memory/2016-56-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB