Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
16-11-2023 07:41
General
-
Target
提交材料.exe
-
Size
3.8MB
-
MD5
aacf37fe5bddbad79fe940b129e4ab20
-
SHA1
fa3b2b05bbf9fe0f076de647ee1b4d4c49e06c59
-
SHA256
fa84c2b8cd4846e1c224d7dfb26e3737393b5fe13738b8d725d9b3815f9b0be1
-
SHA512
28f69ea85c4fbf0e98b60db5c17d1bca1c152d75e63c676e0deb4dceb244d95cad5bdf9a407c6638b4e42eaf90ca565521892fcf196265a375693a681d416a87
-
SSDEEP
98304:GgqM4j53BslobUytMfeUUzeeQY+ySOs0q4R:GQo3BXbUSXzdQC0c
Score
9/10
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer 10 IoCs
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\提交材料.exe"C:\Users\Admin\AppData\Local\Temp\提交材料.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB
-
Filesize
9.4MB