Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
18/08/2023, 22:53
General
-
Target
完整克隆8.exe
-
Size
1.0MB
-
MD5
9f6b5cb1d118cadaf1e81d97665d86c2
-
SHA1
43b9dba7e7ecf84b8a770d99f5e624c5d405dda1
-
SHA256
faee0919269371892d80c8a9ed9e96edb74b326a70d322e244a3a04c7f2fa990
-
SHA512
2e2fd6561143a4c674b89fda3fc0b43e23b752e55cec0facb1adcd3f20a7ff907dc57f62568589b6a86c68f210f6b8c6102d321a931e25a09f89a79cd8652aa8
-
SSDEEP
24576:C3zhlKC3UktdxTYzyHwOaHicYzdpJjp8RBPWLUWXexo1iSOsO7:C3mCkkjxTYa7zJdVYWLZDUB
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\完整克隆8.exe"C:\Users\Admin\AppData\Local\Temp\完整克隆8.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.7MB