Analysis
-
max time kernel
138s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
15/11/2023, 13:19
General
-
Target
b63115a884633f516ef70693291165c33b5ca2a56870dd5c0f10c3dd961407ac.exe
-
Size
13.9MB
-
MD5
516f8f479218eb58168aa0a651a4e3cf
-
SHA1
1d3e1a35d147ba9fdf7a80c3e020252d66f6b866
-
SHA256
b63115a884633f516ef70693291165c33b5ca2a56870dd5c0f10c3dd961407ac
-
SHA512
d6b222003c77c8dd5dbb1abb1049e93515d279d824a112a7952a60b5892e9931374840d416c2c066c52c45d49bf92e95c5070aae9e37b5b7c08f3023ad340372
-
SSDEEP
196608:WM55dOXajv13R9bufY2cGExos96Z87QGymK99oZFKj1Pg8CzM1hwQHwJyH5zcfts:9xMGJHbuATxj3lK9qZiJoQQJK
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b63115a884633f516ef70693291165c33b5ca2a56870dd5c0f10c3dd961407ac.exe"C:\Users\Admin\AppData\Local\Temp\b63115a884633f516ef70693291165c33b5ca2a56870dd5c0f10c3dd961407ac.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
67.8MB