Analysis
-
max time kernel
120s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
14/10/2023, 03:05
General
-
Target
62429500da99c06c7338559add995e579e83a90eaca4ec74fe128a926589d45b.exe
-
Size
7.3MB
-
MD5
8972594a3d0059382369b047c74aa69d
-
SHA1
dca5955d9c3f630c284fb14b956def3d0d58d996
-
SHA256
62429500da99c06c7338559add995e579e83a90eaca4ec74fe128a926589d45b
-
SHA512
599ae9e22bdbc101d05ecd0d23641d00b1cea4b0c99b1602fddb8e454cd4e2cd09166f20607cffeb126f47e067f7bb73508acefe0226c74a6905e55104ceab82
-
SSDEEP
196608:2qBTzm8IPkAv0j7sCW/YCtxju4bcaJyubQgwc+wlnq:vlm1PkAMfsCWACzqv8yuiS
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\62429500da99c06c7338559add995e579e83a90eaca4ec74fe128a926589d45b.exe"C:\Users\Admin\AppData\Local\Temp\62429500da99c06c7338559add995e579e83a90eaca4ec74fe128a926589d45b.exe"1⤵
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
15.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
15.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
15.1MB