Analysis
-
max time kernel
152s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
03/11/2023, 01:39
General
-
Target
46b9ee358978e07a660a06d21bb73badbb4f80d233d25adf2ec46e34ac29dfdc.exe
-
Size
9.3MB
-
MD5
11af0b0156bb8e8fbfc3a0f99dfaa416
-
SHA1
aa9ea25affae531845fe7487e2aea17394f2ba72
-
SHA256
46b9ee358978e07a660a06d21bb73badbb4f80d233d25adf2ec46e34ac29dfdc
-
SHA512
02f220d44ce04c7f33f3c0f4f4829ac5eb6018e57110b2e3add48fa4e5171b792ed56d17093b6059dd35c1474bcbccd188a93730a8a9743d2ddf64c022a43c2a
-
SSDEEP
196608:kLCW7JkunKH+BbNxWTx7ufxrrS5hls1uETA0TsBz:kn7+unGMbNxtrrOls3MV
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\46b9ee358978e07a660a06d21bb73badbb4f80d233d25adf2ec46e34ac29dfdc.exe"C:\Users\Admin\AppData\Local\Temp\46b9ee358978e07a660a06d21bb73badbb4f80d233d25adf2ec46e34ac29dfdc.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
18.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
18.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
18.0MB