Analysis
- max time kernel
65s - max time network
87s - platform
windows10-1703_x64 - resource
win10-20231129-en - resource tags
- submitted
06/12/2023, 03:20
General
- Target Setup.exe
- Size 783.5MB
- Sample231206-dvs5nsag22
- SHA256 9b5f04ff894a2186507a65052f982b057e77d8ff8cf6a43605be7d62b7eb4c5b
Score
7/10
Malware Config
Signatures
- VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
- Program crash 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Setup.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 320 -s 13722⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/320-1-0x00000000003F0000-0x0000000000EB1000-memory.dmp
memory/320-0-0x0000000000FA0000-0x0000000000FA1000-memory.dmp
memory/320-2-0x00000000003F0000-0x0000000000EB1000-memory.dmp
memory/320-5-0x00000000003F0000-0x0000000000EB1000-memory.dmp