Analysis
-
max time kernel
21s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
06/12/2022, 13:40
General
-
Target
12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3.exe
-
Size
2.8MB
-
MD5
01e39eada4367163daf2512dd9009660
-
SHA1
ee681a6b8aa38d86161704a7eb176599466f9260
-
SHA256
12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3
-
SHA512
47819caae813026bf5a669382f505403b0bd1a09fe5a01959df3de46c167d4216f5ac8211d1651169638973575cbab849c4028170c6204dc8c1daedfe6d6c3bb
-
SSDEEP
49152:ko6yjrBWoRCnTEyN8P9mvRPSs9YnLMjcmrnvy5wGU76JpE4Ml51cLY+OsrO4fQn6:koPrBLCTEyOmRPoMhzvRGVJOf1cU+Osr
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3.exe"C:\Users\Admin\AppData\Local\Temp\12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
6.4MB
-
Filesize
244KB
-
Filesize
6.4MB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
6.4MB