Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 08:51

General

  • Target

    e7a75197326fc21cb5ac8b05ce6668fbbefa3217158e60936dbb58496cfdccf7.exe

  • Size

    4.5MB

  • MD5

    b1463b43c5bf4efe5e8e5f50d5e6c823

  • SHA1

    261e6e901ae51e7312c8f6dc5780579594271e46

  • SHA256

    e7a75197326fc21cb5ac8b05ce6668fbbefa3217158e60936dbb58496cfdccf7

  • SHA512

    a7d492672ae4ae6bfe5a1cabebce9d5ab3380c6b34854575c4e16ac1421dddaded702fcadc3da5e488ab6a78e7dc0e926f279a058d5a9dbbbac50e1960c9552f

  • SSDEEP

    98304:T+b7QXNHqrG9WdyKwGnOiC78yONdg+5EmlUs5Hk3oZdu40B:yQdHqrG9WkKwy8AXN2+Wm5HW2dU

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e7a75197326fc21cb5ac8b05ce6668fbbefa3217158e60936dbb58496cfdccf7.exe
    "C:\Users\Admin\AppData\Local\Temp\e7a75197326fc21cb5ac8b05ce6668fbbefa3217158e60936dbb58496cfdccf7.exe"
    1⤵
      PID:1732

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1732-0-0x0000000000400000-0x00000000019A9000-memory.dmp

      Filesize

      21.7MB