Analysis
-
max time kernel
128s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
24/10/2023, 03:35
General
-
Target
SecuriteInfo.com.W32.Injector.A.gen.Eldorado.795.exe
-
Size
792KB
-
MD5
85f545c43a7fd51d9bce91e888ac3af4
-
SHA1
c612d96b24d2719135bb125e907165a3bd97cd7a
-
SHA256
8bd16f9ae9dca4f37d35bee99500c387c6cee824ba6eaac94ff3593b8ded15e2
-
SHA512
885f87a787129aefdb9885c97f671952d33a8b8ca88a229ae1fe8f31df25d5eae4e159ec832642e5c7dabe09ebbbfaf0806853b95c6de3952afc30596582e173
-
SSDEEP
12288:SWfJ3o2FooyK7+dgsSnQpsu6bcALmpqOpfhP1l+gsJMt5HuE6kGFLU3:zNo0ooTaPhoLmEWfhegiKBuE6vQ3
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Injector.A.gen.Eldorado.795.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Injector.A.gen.Eldorado.795.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB