Analysis
-
max time kernel
28s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
29-03-2023 02:37
General
-
Target
5b38d8de7fac2560a9bd76ff6a28cb4c334bfb49e77c57e58a490a437562b96d.exe
-
Size
4.3MB
-
MD5
602d2cb397a0c358f85889217395635a
-
SHA1
d8d56be7672fcab91bc1ecbc814b9d4c90dc60b5
-
SHA256
5b38d8de7fac2560a9bd76ff6a28cb4c334bfb49e77c57e58a490a437562b96d
-
SHA512
1a1b91487ff4745dd7e863908d095d6ccf6ca31d6623f1afda20106037a7ca7c2a9fae5938f31b1baba255bb72ee97d08a0faeb4f295d132b0d0b6550f4df661
-
SSDEEP
98304:SEcBeByqmAcxEV+SxE7OmEubaxiBowCaBNAgTGQMK:Tcuyq0xMxE7OmLbaYBowJBk
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5b38d8de7fac2560a9bd76ff6a28cb4c334bfb49e77c57e58a490a437562b96d.exe"C:\Users\Admin\AppData\Local\Temp\5b38d8de7fac2560a9bd76ff6a28cb4c334bfb49e77c57e58a490a437562b96d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1388-54-0x0000000077F60000-0x0000000077F61000-memory.dmpFilesize
4KB
-
memory/1388-55-0x0000000077F60000-0x0000000077F61000-memory.dmpFilesize
4KB
-
memory/1388-57-0x00000000763D0000-0x00000000763D1000-memory.dmpFilesize
4KB
-
memory/1388-58-0x0000000000140000-0x0000000000A63000-memory.dmpFilesize
9.1MB
-
memory/1388-60-0x0000000000140000-0x0000000000A63000-memory.dmpFilesize
9.1MB
-
memory/1388-61-0x0000000077F60000-0x0000000077F61000-memory.dmpFilesize
4KB
-
memory/1388-62-0x0000000000140000-0x0000000000A63000-memory.dmpFilesize
9.1MB