Resubmissions
28/11/2023, 00:58
231128-bblv5seb21 328/11/2023, 00:54
231128-a9b8xsea81 328/11/2023, 00:50
231128-a69p1sea8s 3Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
28/11/2023, 00:58
Static task
static1
Behavioral task
behavioral1
Sample
VaM_Updater.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
VaM_Updater.exe
Resource
win10v2004-20231127-en
General
-
Target
VaM_Updater.exe
-
Size
1.4MB
-
MD5
8cb96b8c474f3badff46984c6bc8fa41
-
SHA1
95c186bb31eef27c45990545c3120ecf065edc19
-
SHA256
5ad0f3423dfa7dc4e83c20a0631510bdcaa55c5669fcbb21ef86f1641ff962f1
-
SHA512
13a1426b170b351f18f9115d4bdce5c2ec1f73e6822feeb39c2b196d404957ea2eaff35f0579d6f9a9a74818886fca40dd336a8023fa601a58ab4581ce697954
-
SSDEEP
24576:YaO0n/Sf771Ej0WvowfPv+RRIUkr6IibqIjk2cvptJcy0PJ:TOS/sEzvrn+7IUsdibqIZcBtOy0
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2944 VaM_Updater.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2944 VaM_Updater.exe 2944 VaM_Updater.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152KB
MD58fea615acb188fad751db652cf9fe0b4
SHA1168ba95d5f93fe7af8ce6fcbd97b68f4818aae94
SHA2561553d5f929010a1e66f9230cc84bdc533eb97521c235d3b6792dcb923efe3a17
SHA512b0561fad12aa54164818a3b936541aa9a12bd7ac24168b1ed559e925bb7b8596346995f9b2cc7575fea315606ee23d4c83665051e0f251b49cfc56bc78111f72