Analysis
-
max time kernel
148s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
10/10/2023, 07:11
General
-
Target
feade3caf190e23310537a6f2a6a1066a563488f55636f97c6b34e176fe0b3dd.exe
-
Size
6.8MB
-
MD5
08eb6129b9a3ea6fb4348c8b9e25e894
-
SHA1
5b6aa2d3bb587e09b1e31408abe75f5c224acb61
-
SHA256
feade3caf190e23310537a6f2a6a1066a563488f55636f97c6b34e176fe0b3dd
-
SHA512
fdc1e51abc88f377340f5078df81cd617d946cacf9ba42e968c3a069189c27ad71adcbd9f7c563bb40f3bc1c84bb725993b96cc23906858bfd9747e2d49fcd4d
-
SSDEEP
98304:3SiXkxnQ9likwB4IB66DLJwAM7YyuQwzq4EHtJPZQ8X3uOCT:CiCclLwB4w66HJwAMRue4wtJK2C
Score
7/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 4 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 16 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\feade3caf190e23310537a6f2a6a1066a563488f55636f97c6b34e176fe0b3dd.exe"C:\Users\Admin\AppData\Local\Temp\feade3caf190e23310537a6f2a6a1066a563488f55636f97c6b34e176fe0b3dd.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.5MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
12.5MB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
12.5MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
12.5MB