Overview

overview

7

Static

static

7

a3c09527b7...c6.dll

windows7-x64

1

a3c09527b7...c6.dll

windows10-2004-x64

7

Analysis

  • max time kernel
    184s
  • max time network
    192s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/09/2023, 13:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    a3c09527b7ad4956cbe3d6ebea99c25a3b12aadaaaa1b943c3e40848821293c6.dll

  • Size

    9.3MB

  • MD5

    6fdbe862ae3e1d8c326205d2d297a690

  • SHA1

    7377b8d1c8cdbc9dfc48cee7bc5134f07f00c5d1

  • SHA256

    a3c09527b7ad4956cbe3d6ebea99c25a3b12aadaaaa1b943c3e40848821293c6

  • SHA512

    317e42128b33d656fc5d1c1b0020ac5b3404a214f3a941720b3e0d9c08021040881ea2ef1a7acd1444d47c2268cb296bc81c5da99700ecb1c48cb0caf93a336a

  • SSDEEP

    196608:2Un+D5V80MGYwdy3UY+cu9O9NGGKo38YXz9:WD5hdG2nG73lJ

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a3c09527b7ad4956cbe3d6ebea99c25a3b12aadaaaa1b943c3e40848821293c6.dll,#1
    1⤵
      PID:548

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/548-0-0x00007FFD0D330000-0x00007FFD0DC80000-memory.dmp

            Filesize

            9.3MB

            Download

          • memory/548-1-0x00007FFD0D330000-0x00007FFD0DC80000-memory.dmp

            Filesize

            9.3MB

            Download