Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
26-11-2023 13:58
General
-
Target
6ca50cd59a3da1fa0ebb21a718e435f1bf20bdf1819994db8743b7109f14abe0.exe
-
Size
10.0MB
-
MD5
0640b36dd3c85dbd7ea507ebafd0431b
-
SHA1
32a61b5224ab5085751db53574325b0e084b794b
-
SHA256
6ca50cd59a3da1fa0ebb21a718e435f1bf20bdf1819994db8743b7109f14abe0
-
SHA512
d6b8124df153bcf43b315239de8a2015d2211cc5f9f09a95380d2e6cf8f85f5249ebbe28f9ec16eb9f2e87c0c98b5ac99b421b4d89a9e24c3b10f31fdeaaf0ec
-
SSDEEP
196608:QoVJ7nxuQEuHLbX51bSELaw2ny/UWAF0eyFF3S7/xlVUzJXqe28qhmnvID/JPC7k:lVJ7nxuQEi/535XAieWC7rut6vlhmvP
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ca50cd59a3da1fa0ebb21a718e435f1bf20bdf1819994db8743b7109f14abe0.exe"C:\Users\Admin\AppData\Local\Temp\6ca50cd59a3da1fa0ebb21a718e435f1bf20bdf1819994db8743b7109f14abe0.exe"1⤵
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.7MB
MD526a508140e00c53a9161ab4dffa31cf1
SHA16ac53ffc73cd011247bef3b155fa46c8c451e21c
SHA25667f3d8a3eb204425c2891f9bc02b23f1342ffa40d31538cdf081a985e7911383
SHA51271003a2f6b0489b9bc71ed9558678d9f3a2d56d38355cdb021c7aee557d9600031dabf3ef0df3ddba0bffae8292889e3fd630ac315ca2f2356bdfe81799a69e9
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
19.9MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
19.9MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
19.9MB
-
Filesize
4KB
-
Filesize
4KB