Analysis
- max time kernel
125s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
05/02/2024, 20:11
General
- Target 92e3ba885fd0db17ef95e96f79c08411.exe
- Size 5.7MB
- Sample240205-yyscrsfef7
- SHA256 3813ae5befc6bb0379a01503a657e40232929698ff744b3f97b2776483f77429
Malware Config
Signatures
- VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\92e3ba885fd0db17ef95e96f79c08411.exe"C:\Users\Admin\AppData\Local\Temp\92e3ba885fd0db17ef95e96f79c08411.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2216-0-0x0000000002960000-0x0000000002961000-memory.dmp
memory/2216-2-0x0000000000400000-0x0000000000D4F000-memory.dmp
memory/2216-1-0x0000000002970000-0x0000000002971000-memory.dmp
memory/2216-4-0x00000000029B0000-0x00000000029B1000-memory.dmp
memory/2216-5-0x0000000000400000-0x0000000000D4F000-memory.dmp
memory/2216-6-0x00000000029C0000-0x00000000029C1000-memory.dmp
memory/2216-3-0x00000000029A0000-0x00000000029A1000-memory.dmp
memory/2216-7-0x00000000029D0000-0x00000000029D1000-memory.dmp
memory/2216-8-0x00000000029E0000-0x00000000029E1000-memory.dmp
memory/2216-12-0x0000000005670000-0x000000000571A000-memory.dmp
memory/2216-13-0x0000000074E20000-0x00000000755D0000-memory.dmp
memory/2216-14-0x00000000055B0000-0x00000000055C0000-memory.dmp
memory/2216-15-0x00000000055B0000-0x00000000055C0000-memory.dmp
memory/2216-16-0x0000000005720000-0x0000000005CC4000-memory.dmp
memory/2216-17-0x0000000005CD0000-0x0000000005D76000-memory.dmp
memory/2216-18-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-21-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-23-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-27-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-25-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-29-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-37-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-39-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-35-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-33-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-31-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-41-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-51-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-55-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-63-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-67-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-65-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-61-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-69-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-59-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-57-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-53-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-49-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-47-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-45-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-43-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-19-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-71-0x0000000005CD0000-0x0000000005D73000-memory.dmp
memory/2216-735-0x0000000005D80000-0x0000000005E12000-memory.dmp
memory/2216-734-0x0000000005620000-0x0000000005632000-memory.dmp
memory/2216-736-0x00000000055B0000-0x00000000055C0000-memory.dmp
memory/2216-738-0x0000000000400000-0x0000000000D4F000-memory.dmp
memory/2216-739-0x0000000074E20000-0x00000000755D0000-memory.dmp