Analysis
-
max time kernel
34s -
max time network
40s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11/02/2024, 15:38
General
-
Target
SquadHack_BP.exe
-
Size
5.3MB
-
MD5
1b4dd2bfa8a0aaa2a19c8a2b9f17d976
-
SHA1
17258e7466558791a4ba45a90fb06105fc24d3bb
-
SHA256
7e84ed507d22361c66ec82eaa22d09227f8d9939d36b3ec47d30f9e9bf1e13c4
-
SHA512
1a916bc1e5641df341b07ade7bd6b488dfb2c541ad51b3727c019fab438de22e661103cf21786f3893399203540f1e656e015d3fe9b7a167225b83b36ca3896e
-
SSDEEP
98304:MFEG7VeHq19bQVrPoNZj+1ue5uxlOQbzFhEr9XYtuNEabW6k/yuLNcnYE:8EkQH0bArQNd+vClOQb7sTEabW6MDYY
Score
8/10
Malware Config
Signatures
-
Downloads MZ/PE file
-
VMProtect packed file 4 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SquadHack_BP.exe"C:\Users\Admin\AppData\Local\Temp\SquadHack_BP.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.5MB
-
Filesize
4KB
-
Filesize
8.5MB
-
Filesize
4KB
-
Filesize
8.5MB
-
Filesize
8.5MB