Analysis
-
max time kernel
134s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 00:49
General
-
Target
VMProtect.Ultimate.v3.6.0.1416-Cracked/VMProtect.exe
-
Size
23.7MB
-
MD5
07df460af29fe65ec9432bce2788e54b
-
SHA1
5dfef5ebadf56cf228c9990fd37d96f90a5a5c75
-
SHA256
80ec62939ba2c726cfb39ae190302c8d6a944ba1ac7b6212c19fa22f2bc15dc2
-
SHA512
72048734f08735a710d553b801ced90d981b0ca5d2eaa2578037c6e64a704e5bdb6cd93763469cc23e263789448f5520af0da26e412a19068ad6401a1006a2df
-
SSDEEP
393216:p1NwNgGqHjWGteCrihgH6rV9N1Nz2OiRYP6gQ323yDnQLwAW/2DueOHH+Y:pAn7GteCrYgH2NpiRc6d32CzSm3
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VMProtect.Ultimate.v3.6.0.1416-Cracked\VMProtect.exe"C:\Users\Admin\AppData\Local\Temp\VMProtect.Ultimate.v3.6.0.1416-Cracked\VMProtect.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
68.3MB