Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 07:21

General

  • Target

    78c7b9f3f512b0d6aacf63efc0b10be6.exe

  • Size

    2.2MB

  • MD5

    78c7b9f3f512b0d6aacf63efc0b10be6

  • SHA1

    870f4af0a82c93beea0ec33a1ab81f7a8a27fc04

  • SHA256

    cec01ec497f814484451e18589faa86f09367c2cc005d5cd5f64eedde0860010

  • SHA512

    62248dfde3f49ebe0d4731d227daf8e50a12649a583bcce1cd87b1a2dd96242f70b9c000d59a2267eb250ab039288896e1c0f6c3f6b34eb3d0afafaf9d2c0223

  • SSDEEP

    49152:KCdubdO/rcOAEWCbskBaqaIPcRQdn/IoWuBuqvsYMRExz0:KCX/rnpYkBZHc4n/I6J9x4

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 53 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78c7b9f3f512b0d6aacf63efc0b10be6.exe
    "C:\Users\Admin\AppData\Local\Temp\78c7b9f3f512b0d6aacf63efc0b10be6.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1532

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1532-0-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-8-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-7-0x0000000002D50000-0x0000000002D51000-memory.dmp

          Filesize

          4KB

        • memory/1532-6-0x0000000002D40000-0x0000000002D41000-memory.dmp

          Filesize

          4KB

        • memory/1532-5-0x0000000002D30000-0x0000000002D31000-memory.dmp

          Filesize

          4KB

        • memory/1532-4-0x0000000001540000-0x0000000001541000-memory.dmp

          Filesize

          4KB

        • memory/1532-3-0x0000000001530000-0x0000000001531000-memory.dmp

          Filesize

          4KB

        • memory/1532-2-0x0000000001520000-0x0000000001521000-memory.dmp

          Filesize

          4KB

        • memory/1532-1-0x0000000001410000-0x0000000001411000-memory.dmp

          Filesize

          4KB

        • memory/1532-11-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-12-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-13-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-14-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-15-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-16-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-17-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-18-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-19-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-20-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-21-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-22-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-23-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-24-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-25-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-26-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-27-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-28-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-29-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-30-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-31-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-32-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-33-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-34-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-35-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-36-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-37-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-38-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-39-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-40-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-41-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-42-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-43-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-44-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-45-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-46-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-47-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-51-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-50-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-52-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-53-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-54-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-55-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-56-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-57-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-58-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-59-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-60-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-62-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-61-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB

        • memory/1532-63-0x00000000005C0000-0x0000000000A6F000-memory.dmp

          Filesize

          4.7MB