Analysis

  • max time kernel
    2s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/01/2024, 11:53

General

  • Target

    a33c5d499d3619b23cb9fa7c227e9aad40ef82833cbaac280e9a5197b4b7d33e.exe

  • Size

    3.4MB

  • MD5

    7046c38dac67b20912230c63c35764db

  • SHA1

    ed5bafa2be7e3550d358068bc66984095da5d86e

  • SHA256

    a33c5d499d3619b23cb9fa7c227e9aad40ef82833cbaac280e9a5197b4b7d33e

  • SHA512

    da182fbefa2d149015171173b7024591cf1287b9bae402c1e242ce45d93e71e5274a77832bda2c230765163745e48f297d63cffe899834ebfaaff5790c5d8921

  • SSDEEP

    98304:N0s0h9jIp6FYskEhi6jESyfbfhW1ZeaxC7a1:2E6+skCAfD8WaxC7a1

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 6 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a33c5d499d3619b23cb9fa7c227e9aad40ef82833cbaac280e9a5197b4b7d33e.exe
    "C:\Users\Admin\AppData\Local\Temp\a33c5d499d3619b23cb9fa7c227e9aad40ef82833cbaac280e9a5197b4b7d33e.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1008-2-0x0000000002800000-0x00000000029CD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-0-0x0000000002800000-0x00000000029CD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-3-0x0000000002800000-0x00000000029CD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-8-0x0000000002B10000-0x0000000002CDD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-10-0x0000000002B10000-0x0000000002CDD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-11-0x0000000002B10000-0x0000000002CDD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-7-0x0000000002800000-0x00000000029CD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-15-0x0000000002B10000-0x0000000002CDD000-memory.dmp

    Filesize

    1.8MB

  • memory/1008-36-0x0000000002B10000-0x0000000002CDD000-memory.dmp

    Filesize

    1.8MB