Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/12/2023, 07:21
Behavioral task
behavioral1
Sample
78c7b9f3f512b0d6aacf63efc0b10be6.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
78c7b9f3f512b0d6aacf63efc0b10be6.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
78c7b9f3f512b0d6aacf63efc0b10be6.exe
-
Size
2.2MB
-
MD5
78c7b9f3f512b0d6aacf63efc0b10be6
-
SHA1
870f4af0a82c93beea0ec33a1ab81f7a8a27fc04
-
SHA256
cec01ec497f814484451e18589faa86f09367c2cc005d5cd5f64eedde0860010
-
SHA512
62248dfde3f49ebe0d4731d227daf8e50a12649a583bcce1cd87b1a2dd96242f70b9c000d59a2267eb250ab039288896e1c0f6c3f6b34eb3d0afafaf9d2c0223
-
SSDEEP
49152:KCdubdO/rcOAEWCbskBaqaIPcRQdn/IoWuBuqvsYMRExz0:KCX/rnpYkBZHc4n/I6J9x4
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1964-0-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-36-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-40-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-41-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-42-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-43-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-44-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-45-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-46-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-47-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-48-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-49-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-50-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-51-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-52-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-53-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-54-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-55-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-56-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-57-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-58-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-59-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-60-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-61-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-62-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-63-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-65-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-64-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect behavioral1/memory/1964-92-0x0000000000E90000-0x000000000133F000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1964 78c7b9f3f512b0d6aacf63efc0b10be6.exe 1964 78c7b9f3f512b0d6aacf63efc0b10be6.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1964 78c7b9f3f512b0d6aacf63efc0b10be6.exe