Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
25-03-2023 05:58
General
-
Target
d35c18d43c9519fa7bea512743c0aa4a5754fe10ecb65b721d5db3c25973a5b7.exe
-
Size
5.6MB
-
MD5
d385415d784a7f3ce5235748c9102e14
-
SHA1
b22d06547a45a2190ce4abd95a30fdb896e271bc
-
SHA256
d35c18d43c9519fa7bea512743c0aa4a5754fe10ecb65b721d5db3c25973a5b7
-
SHA512
f95c22ad71a57c8edbdf23723da75fc77a88a531ca195ad5ba2bb71a830f9f42aeae546b9a5734acbe7f341aeb7f443fb04699cb772e1f3fe551e04496c2174b
-
SSDEEP
98304:rQpteimhL0SAAX8tlhhaGqdrqFH2X4yrmVmF5yM4l8vvLZ7ar0:0pHmhL0SV8IhqF81rmQF5yM4CvDZ
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d35c18d43c9519fa7bea512743c0aa4a5754fe10ecb65b721d5db3c25973a5b7.exe"C:\Users\Admin\AppData\Local\Temp\d35c18d43c9519fa7bea512743c0aa4a5754fe10ecb65b721d5db3c25973a5b7.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3184-133-0x0000000000FA0000-0x0000000000FA1000-memory.dmpFilesize
4KB
-
memory/3184-134-0x00000000010D0000-0x00000000010D1000-memory.dmpFilesize
4KB
-
memory/3184-135-0x0000000002C90000-0x0000000002C91000-memory.dmpFilesize
4KB
-
memory/3184-136-0x0000000002CB0000-0x0000000002CB1000-memory.dmpFilesize
4KB
-
memory/3184-137-0x0000000002CC0000-0x0000000002CC1000-memory.dmpFilesize
4KB
-
memory/3184-138-0x0000000002CD0000-0x0000000002CD1000-memory.dmpFilesize
4KB
-
memory/3184-139-0x0000000002CE0000-0x0000000002CE1000-memory.dmpFilesize
4KB
-
memory/3184-140-0x0000000002CF0000-0x0000000002CF1000-memory.dmpFilesize
4KB
-
memory/3184-141-0x0000000000400000-0x0000000000E0D000-memory.dmpFilesize
10.1MB