Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    17/09/2023, 11:21

General

  • Target

    95a1cb3edbb38d3b8bbb257bd4d6ed95a44ce1a5ebd4082192c60fd7117be707.exe

  • Size

    9.1MB

  • MD5

    9270907e7179590256ae3d4ece35ca79

  • SHA1

    fb035f51cb27a0f8dc1843a463ba4ab6e42f42b9

  • SHA256

    95a1cb3edbb38d3b8bbb257bd4d6ed95a44ce1a5ebd4082192c60fd7117be707

  • SHA512

    b7ce55d242a95243280554aed2ebf27ed6d24bb69dbaa813ef8fe079b06ca592e95db221a2a9e0260a022a935bc549dc2cede17be03d17f2105cb88b46e7c6a2

  • SSDEEP

    196608:5OELotouqsA1FEEsKJgTOdSWgd2y4kHlRYcX:HLotH9APEEqoSWgdx4kHlRYcX

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\95a1cb3edbb38d3b8bbb257bd4d6ed95a44ce1a5ebd4082192c60fd7117be707.exe
    "C:\Users\Admin\AppData\Local\Temp\95a1cb3edbb38d3b8bbb257bd4d6ed95a44ce1a5ebd4082192c60fd7117be707.exe"
    1⤵
      PID:2736

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2736-1-0x000000013F500000-0x000000013FE25000-memory.dmp

      Filesize

      9.1MB

    • memory/2736-0-0x000000013F500000-0x000000013FE25000-memory.dmp

      Filesize

      9.1MB

    • memory/2736-2-0x000000013F500000-0x000000013FE25000-memory.dmp

      Filesize

      9.1MB