Analysis

  • max time kernel
    143s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/10/2023, 19:32

General

  • Target

    3c78812420f29b6b0cb30fed6e01635458a69c1b2f58ac58acb90c92ee6e1c99.exe

  • Size

    8.2MB

  • MD5

    e5031856dc25787d3896134f88996fa0

  • SHA1

    3cf06aca90e15caae52503c299b64892c0e6fe36

  • SHA256

    3c78812420f29b6b0cb30fed6e01635458a69c1b2f58ac58acb90c92ee6e1c99

  • SHA512

    9bfdc4fefe8e4c057b9028981e7e1cd322cd6c039d53089382a5c951b87772aa542f022b756d9c4c45f3b2a2adf0939ad9af2ce7471b74fd2e444e9d9da1190e

  • SSDEEP

    98304:Ugi8/+a6Mi0eHMl8vypM3wF6XPek/pcvOa8rCPQRdNV7D0zatuwju31eWp6kO3/3:UkneHmecMRp7a8m4lJOal7Wiv1Y0

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c78812420f29b6b0cb30fed6e01635458a69c1b2f58ac58acb90c92ee6e1c99.exe
    "C:\Users\Admin\AppData\Local\Temp\3c78812420f29b6b0cb30fed6e01635458a69c1b2f58ac58acb90c92ee6e1c99.exe"
    1⤵
      PID:3432

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/3432-0-0x0000000000400000-0x0000000000C3A000-memory.dmp

            Filesize

            8.2MB

          • memory/3432-1-0x0000000000400000-0x0000000000C3A000-memory.dmp

            Filesize

            8.2MB

          • memory/3432-2-0x0000000000400000-0x0000000000C3A000-memory.dmp

            Filesize

            8.2MB