Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
27/01/2024, 14:02
General
-
Target
7a706a74d190cde346915b721145840d.exe
-
Size
187KB
-
MD5
7a706a74d190cde346915b721145840d
-
SHA1
3fcf2e92bffa7547a879c6b335ba5c4d04efb74e
-
SHA256
8e353234380711cf6c377ecce22b57e9ee964755635c219563d382f2fe293ddc
-
SHA512
2b2191723e3477ef2716bd08cec56e07023f132fb74fba8e7b9182162be3ba4d648e3f45ba87e05e3c251c8cb2a73f4c9a898669b33ec22c5e2cd05aa2b90610
-
SSDEEP
3072:kgUxT0GrZD0jbbpu4S5xxoysqDv2DI+NPB2+lf4HbEE6KWQNmSF:kJxT0iZojbbpuh5xxokDabNI+pnI
Score
10/10
Malware Config
Signatures
-
UAC bypass 3 TTPs 1 IoCs
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
System policy modification 1 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a706a74d190cde346915b721145840d.exe"C:\Users\Admin\AppData\Local\Temp\7a706a74d190cde346915b721145840d.exe"1⤵
- UAC bypass
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System policy modification
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB