Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
21/09/2023, 03:46
General
-
Target
9a8665cebd6bafee37f10f41dcf3af2a26621984d47897ce62f960c1483a1fea.exe
-
Size
12.9MB
-
MD5
7574bf41b0af7082656610d5a8d3f7c7
-
SHA1
ae9d9de01e7c86c778cb14b9b0d4016e2cd9b7b0
-
SHA256
9a8665cebd6bafee37f10f41dcf3af2a26621984d47897ce62f960c1483a1fea
-
SHA512
5648e69611d9b3805ab4c1f6c3aa6e7aed3e37eeb3e36116bd056b0fb4e2a9e1f4a228b4772585605357584da0c1980399f8957ba03fe1731735faf6b5a24569
-
SSDEEP
393216:Jr57dFX3K7KW6Ry6KPlAtlJx5fmG3Icpl:Jr57X3KGy6KPaHJxBmG3hn
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9a8665cebd6bafee37f10f41dcf3af2a26621984d47897ce62f960c1483a1fea.exe"C:\Users\Admin\AppData\Local\Temp\9a8665cebd6bafee37f10f41dcf3af2a26621984d47897ce62f960c1483a1fea.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
21.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
21.3MB
-
Filesize
21.3MB