Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06-03-2024 16:36
General
-
Target
b7df7f0045298aa7b29bca6405dabe91.exe
-
Size
552KB
-
MD5
b7df7f0045298aa7b29bca6405dabe91
-
SHA1
c3d6c332aa9fe6f005560887ff8e33c1593335e8
-
SHA256
d2d00fe95d547953279e8f9100d42df9f5c2b85ab1fcafec7047263d3bb7e1e8
-
SHA512
d2da8260c436e2248130afdaa0dcd0c49f307e882f58d4d3b7bc56e29c64d1641fabd9eddfbea9ef37d1e6fdfb183516742bf12c5d162fb68e395a9e7ed3076c
-
SSDEEP
12288:nEF9CyKFzck45LzfBLZywxFVAnDTBpj3tucuyEFNXSgyL0UFK:nETsV453BLIYKDTHjdQFNigy4KK
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Drops file in System32 directory 3 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: LoadsDriver 6 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7df7f0045298aa7b29bca6405dabe91.exe"C:\Users\Admin\AppData\Local\Temp\b7df7f0045298aa7b29bca6405dabe91.exe"1⤵
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB