Analysis

  • max time kernel
    61s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-04-2023 01:42

General

  • Target

    7e574a5a664ca46b7b3ccac03655553e3bab5033b435aa5bbb12dfb80adab21e.exe

  • Size

    1.3MB

  • MD5

    88456780bbdb79f303286d8283048247

  • SHA1

    3a4de37d37418dbf4c2e371104af71daa53ac965

  • SHA256

    7e574a5a664ca46b7b3ccac03655553e3bab5033b435aa5bbb12dfb80adab21e

  • SHA512

    d1ae9c5b5405d77dbcc6fcaeff6a2d48e4ff4e000b808967c78cd3518ca79824d124a016293eec930c5b9f2e47026c28d47bcfc2f31964ac8b7e93c8f5f44e59

  • SSDEEP

    24576:pxnjyFdHg6ZEUEYGnqSNK8WbxXO6TftfhkRn6vAm3/2AZF3AvKM:zjyFdHUlxM8WlO6Tjk1KAm3/lZF2l

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 4 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7e574a5a664ca46b7b3ccac03655553e3bab5033b435aa5bbb12dfb80adab21e.exe
    "C:\Users\Admin\AppData\Local\Temp\7e574a5a664ca46b7b3ccac03655553e3bab5033b435aa5bbb12dfb80adab21e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3148-136-0x0000000000400000-0x00000000006D5000-memory.dmp
    Filesize

    2.8MB

  • memory/3148-137-0x0000000000400000-0x00000000006D5000-memory.dmp
    Filesize

    2.8MB

  • memory/3148-139-0x0000000000400000-0x00000000006D5000-memory.dmp
    Filesize

    2.8MB

  • memory/3148-140-0x0000000000400000-0x00000000006D5000-memory.dmp
    Filesize

    2.8MB