Analysis

  • max time kernel
    154s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 06:50

General

  • Target

    bb96d8985acab6735cdb84a8d739e80b48e552cdfa7258bdce1f3ef9e8f1b275.exe

  • Size

    10.9MB

  • MD5

    c0de428c84fd52971adfe3285bf79864

  • SHA1

    8ad282b04789ee8b15e101f9498d5bb200f80b41

  • SHA256

    bb96d8985acab6735cdb84a8d739e80b48e552cdfa7258bdce1f3ef9e8f1b275

  • SHA512

    fbedf6af9c5ee6e65ea9bdb43726d88a5236354e55a5cb39e7121056499d7717abaa63f5823b341e5da2bdd2404626c8d09d0656d7afdb6a2d9735c8188c60db

  • SSDEEP

    196608:6fKJ0S6JUamyNf6t9GfZSPEb3tWuwj5/JP13e01DVyGDrOg71MQ6APoM2zCaemP8:6fKJ0rh/l2GfZsEbguQ9Jpx1DVyG/OVc

Score
7/10

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bb96d8985acab6735cdb84a8d739e80b48e552cdfa7258bdce1f3ef9e8f1b275.exe
    "C:\Users\Admin\AppData\Local\Temp\bb96d8985acab6735cdb84a8d739e80b48e552cdfa7258bdce1f3ef9e8f1b275.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1700-0-0x0000000000400000-0x0000000001C21000-memory.dmp

    Filesize

    24.1MB

  • memory/1700-1-0x0000000000400000-0x0000000001C21000-memory.dmp

    Filesize

    24.1MB

  • memory/1700-4-0x00000000762C0000-0x00000000762C1000-memory.dmp

    Filesize

    4KB

  • memory/1700-5-0x0000000077DA0000-0x0000000077DA1000-memory.dmp

    Filesize

    4KB

  • memory/1700-7-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-9-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-8-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-12-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-14-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-16-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-18-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-20-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-22-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-25-0x0000000000400000-0x0000000001C21000-memory.dmp

    Filesize

    24.1MB

  • memory/1700-24-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-27-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-29-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-31-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-35-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-33-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-37-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-39-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-41-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-43-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-45-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-47-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-49-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-51-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB

  • memory/1700-52-0x0000000003D30000-0x0000000003D6E000-memory.dmp

    Filesize

    248KB