Analysis
- max time kernel
136s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
29/01/2024, 15:14
General
- Target 8028cfe09e20c3574986f107f4d6c7e4.exe
- Size 372KB
- Sample240129-smdscaeagl
- SHA256 11d374754fd2ab8d5e2c01d597c9ef5f366180b0c47b722ee725a43af643b252
Score
7/10
Malware Config
Signatures
- VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8028cfe09e20c3574986f107f4d6c7e4.exe"C:\Users\Admin\AppData\Local\Temp\8028cfe09e20c3574986f107f4d6c7e4.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1512-0-0x0000000000EF0000-0x0000000000FB9000-memory.dmp
memory/1512-1-0x0000000000EF0000-0x0000000000FB9000-memory.dmp
memory/1512-3-0x0000000000EF0000-0x0000000000FB9000-memory.dmp