Analysis
-
max time kernel
177s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06-12-2022 13:41
General
-
Target
80b38385db72a1c70c0fce431dba1dd6d3a1e804c885ae469791278082a18278.exe
-
Size
2.8MB
-
MD5
a8702c9c645f836412347dcfc7e19e78
-
SHA1
53eb6550644cd673d37bc09f916e4d0077876a55
-
SHA256
80b38385db72a1c70c0fce431dba1dd6d3a1e804c885ae469791278082a18278
-
SHA512
cd64cd48c4d2c4051263c12ff9143b22a1a7042f17f71de2edfd7c18ce9f4ce585760af8f29393618594745733bbed7c7de844faf5156c8ba48afa2a47fe2832
-
SSDEEP
49152:3/MUg1hquhjmMlEdOcxYdn6b27zvXvs09PTXLuy:dKhJmMqdOcxYl77/s09bXq
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\80b38385db72a1c70c0fce431dba1dd6d3a1e804c885ae469791278082a18278.exe"C:\Users\Admin\AppData\Local\Temp\80b38385db72a1c70c0fce431dba1dd6d3a1e804c885ae469791278082a18278.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
3.0MB