Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18/02/2024, 05:43
General
-
Target
4b659140cd5b2ee2e59c69d3c0d52852b50593e05300235894e6a5327d76db31.exe
-
Size
11.6MB
-
MD5
b96826254785026338d3456a663aeeec
-
SHA1
06464049933a03dbedf8a662fcdc2650e9629061
-
SHA256
4b659140cd5b2ee2e59c69d3c0d52852b50593e05300235894e6a5327d76db31
-
SHA512
6b9323862e3777448b0a8454e959223d5e46bf4821c4e6abebe0ffbbbc8d8e8b2e827e7541f0602c644b7867394986e54f36037a01c329cf3106ace038ccc5ad
-
SSDEEP
196608:wJ1pdSZVnwyGZ+eCDfYjPq0Nz2JZ+vGn1zxfO+5/qySyxOrLM0Ok94kw4p7:+daVnwdMegYq0NEZPnZ5/FwR+k
Score
9/10
Malware Config
Signatures
-
Detects executables packed with VMProtect. 3 IoCs
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b659140cd5b2ee2e59c69d3c0d52852b50593e05300235894e6a5327d76db31.exe"C:\Users\Admin\AppData\Local\Temp\4b659140cd5b2ee2e59c69d3c0d52852b50593e05300235894e6a5327d76db31.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
25.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
25.0MB