Analysis
-
max time kernel
156s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 12:33
General
-
Target
6edb98faf700c660687add7a4c0b1d49.exe
-
Size
808KB
-
MD5
6edb98faf700c660687add7a4c0b1d49
-
SHA1
bb1dadcf812f4f7082b815c059f144c1dffa223b
-
SHA256
e971dbd6023b6b131b6eb7d5dca6a7659224cf8005291e4b9a675d65c39e3ace
-
SHA512
fb843c78975dce6a1e717da3eaeaff02686633eb5088b18cc83b1855324c19be7a2c1f947f69c1def9ac6a413b4503cdec86d35bfd0bf688dd96db8afd2b12ad
-
SSDEEP
12288:1RMOrqg9i+V5UxZDCSFf2TBD79hZ/l7k3wF+yggl24DU4X4875/DpC1sysbA:DMOrqetS10nY3wfgOl75/QsU
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 6 IoCs
Detects executables packed with VMProtect commercial packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6edb98faf700c660687add7a4c0b1d49.exe"C:\Users\Admin\AppData\Local\Temp\6edb98faf700c660687add7a4c0b1d49.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2008 -s 25242⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2008 -ip 20081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.8MB