Analysis
- max time kernel
142s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
06/02/2024, 16:36
General
- Target 82ec6e4c955a84417af806e068a236c1eba9f9db4f7e789ea70ed7d0e56cd0fb.exe
- Size 1.7MB
- Sample240206-t37wssbbh2
- SHA256 82ec6e4c955a84417af806e068a236c1eba9f9db4f7e789ea70ed7d0e56cd0fb
Score
7/10
Malware Config
Signatures
- VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
- Drops file in Windows directory 2 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\82ec6e4c955a84417af806e068a236c1eba9f9db4f7e789ea70ed7d0e56cd0fb.exe"C:\Users\Admin\AppData\Local\Temp\82ec6e4c955a84417af806e068a236c1eba9f9db4f7e789ea70ed7d0e56cd0fb.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3536-0-0x0000000000400000-0x0000000000820000-memory.dmp
memory/3536-1-0x0000000000400000-0x0000000000820000-memory.dmp
memory/3536-3-0x00000000763F0000-0x00000000763F1000-memory.dmp
memory/3536-4-0x00000000770F0000-0x00000000770F1000-memory.dmp
memory/3536-7-0x0000000002850000-0x0000000002923000-memory.dmp
memory/3536-9-0x0000000000400000-0x0000000000820000-memory.dmp