Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2023, 07:21
Behavioral task
behavioral1
Sample
78c7b9f3f512b0d6aacf63efc0b10be6.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
78c7b9f3f512b0d6aacf63efc0b10be6.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
78c7b9f3f512b0d6aacf63efc0b10be6.exe
-
Size
2.2MB
-
MD5
78c7b9f3f512b0d6aacf63efc0b10be6
-
SHA1
870f4af0a82c93beea0ec33a1ab81f7a8a27fc04
-
SHA256
cec01ec497f814484451e18589faa86f09367c2cc005d5cd5f64eedde0860010
-
SHA512
62248dfde3f49ebe0d4731d227daf8e50a12649a583bcce1cd87b1a2dd96242f70b9c000d59a2267eb250ab039288896e1c0f6c3f6b34eb3d0afafaf9d2c0223
-
SSDEEP
49152:KCdubdO/rcOAEWCbskBaqaIPcRQdn/IoWuBuqvsYMRExz0:KCX/rnpYkBZHc4n/I6J9x4
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1532-0-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-8-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-11-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-12-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-13-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-14-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-15-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-16-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-17-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-18-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-19-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-20-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-21-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-22-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-23-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-24-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-25-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-26-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-27-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-28-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-29-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-30-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-31-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-32-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-33-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-34-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-35-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-36-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-37-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-38-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-39-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-40-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-41-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-42-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-43-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-44-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-45-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-46-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-47-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-51-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-50-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-52-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-53-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-54-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-55-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-56-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-57-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-58-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-59-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-60-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-62-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-61-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect behavioral2/memory/1532-63-0x00000000005C0000-0x0000000000A6F000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1532 78c7b9f3f512b0d6aacf63efc0b10be6.exe 1532 78c7b9f3f512b0d6aacf63efc0b10be6.exe 1532 78c7b9f3f512b0d6aacf63efc0b10be6.exe 1532 78c7b9f3f512b0d6aacf63efc0b10be6.exe