Analysis
-
max time kernel
143s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 16:23
General
-
Target
057ccd364f31750f0399877ce4f51a2b.exe
-
Size
1.7MB
-
MD5
057ccd364f31750f0399877ce4f51a2b
-
SHA1
1b87ddf440df7ad74baa19d3e1a4572be6453a26
-
SHA256
dc5a55e3e9affb7e057620f030595ca4233095aa149f9f349e8ab61e99fcea3c
-
SHA512
86ee3a40d7c6616cda3fdeda6817ea74f8e3ae2ace76145e4e1cfdd03299a6687feb91fb5e5c345b6ae4669fbd1488900fa2eb58b9d811b526c9681a39d959d1
-
SSDEEP
24576:s7snn2mEUgi7O2WXfadG8CM4o/NtB9kHbrTq/n2X4kspAq7xHjjxsETG275Tbm54:ssn2Do7kydGRvEtB9Wq/2IB75tRfY5
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\057ccd364f31750f0399877ce4f51a2b.exe"C:\Users\Admin\AppData\Local\Temp\057ccd364f31750f0399877ce4f51a2b.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
4.0MB