Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 15:32

General

  • Target

    03c7bfcad6c13938041760d456260c82.exe

  • Size

    1.1MB

  • MD5

    03c7bfcad6c13938041760d456260c82

  • SHA1

    793452d3c1e458958ea3f21c1fd41987857d85f9

  • SHA256

    e1a9834014eba48ea367ad80307576467077785fdcac574a4822bc510f62c2bd

  • SHA512

    492cb8a77cb426156305e46c891e84f7a3e6034e9a53edab5cf9c1b8c0a22b21c6615ae57410fd030e7fd810cbcf9bdfae0e7445260ab0e59fe680acb2acac34

  • SSDEEP

    24576:muZ54jl7oSPiL4dq9pyVEJQDnqmjhoEUet9o:H4jxoDL4dqTyVEJeJhnUc9o

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\03c7bfcad6c13938041760d456260c82.exe
    "C:\Users\Admin\AppData\Local\Temp\03c7bfcad6c13938041760d456260c82.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2724-0-0x0000000000400000-0x0000000000743000-memory.dmp

    Filesize

    3.3MB

  • memory/2724-1-0x0000000000400000-0x0000000000743000-memory.dmp

    Filesize

    3.3MB

  • memory/2724-4-0x0000000000400000-0x0000000000743000-memory.dmp

    Filesize

    3.3MB