Analysis

  • max time kernel
    141s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-03-2024 15:05

General

  • Target

    VwMeter/VwUpdate.exe

  • Size

    278KB

  • MD5

    bff83d7bd87ae8e5426035b0c67affff

  • SHA1

    f868e80eae976dbda4f6e432e317986509057a13

  • SHA256

    24c625b3e0d41ac66006e047a9caf66bd5d7e4f36b487df3f12018ec8fc6fca1

  • SHA512

    1c8239caa14e0df5a86480f17cdab0b06933b784426984478f9968420cfea6813e7d603644f598bb7f04f08bc37d9e044754132e1f2a65d9a35fe9200017fcdc

  • SSDEEP

    6144:+O6UM3aCW3e0dZfFgCZTdsmnElPV1Z4F6TQAI5d/Grernu:CUAI1dTdxGmnOPV1y6T5V

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VwMeter\VwUpdate.exe
    "C:\Users\Admin\AppData\Local\Temp\VwMeter\VwUpdate.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3492-0-0x0000000000400000-0x0000000000484000-memory.dmp

    Filesize

    528KB

  • memory/3492-1-0x00000000022D0000-0x000000000231B000-memory.dmp

    Filesize

    300KB

  • memory/3492-2-0x0000000002470000-0x0000000002471000-memory.dmp

    Filesize

    4KB

  • memory/3492-5-0x0000000002480000-0x0000000002481000-memory.dmp

    Filesize

    4KB

  • memory/3492-4-0x0000000002430000-0x0000000002431000-memory.dmp

    Filesize

    4KB

  • memory/3492-3-0x00000000024A0000-0x00000000024A1000-memory.dmp

    Filesize

    4KB

  • memory/3492-6-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/3492-7-0x00000000024B0000-0x00000000024B1000-memory.dmp

    Filesize

    4KB

  • memory/3492-8-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/3492-9-0x0000000002A90000-0x0000000002A91000-memory.dmp

    Filesize

    4KB

  • memory/3492-10-0x0000000002460000-0x0000000002461000-memory.dmp

    Filesize

    4KB

  • memory/3492-11-0x0000000002A80000-0x0000000002A82000-memory.dmp

    Filesize

    8KB

  • memory/3492-12-0x0000000002530000-0x0000000002531000-memory.dmp

    Filesize

    4KB

  • memory/3492-13-0x0000000002560000-0x0000000002561000-memory.dmp

    Filesize

    4KB

  • memory/3492-14-0x00000000024E0000-0x00000000024E1000-memory.dmp

    Filesize

    4KB

  • memory/3492-15-0x0000000002570000-0x0000000002571000-memory.dmp

    Filesize

    4KB

  • memory/3492-16-0x0000000002510000-0x0000000002511000-memory.dmp

    Filesize

    4KB

  • memory/3492-17-0x0000000002540000-0x0000000002541000-memory.dmp

    Filesize

    4KB

  • memory/3492-19-0x00000000025E0000-0x00000000025E1000-memory.dmp

    Filesize

    4KB

  • memory/3492-18-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/3492-20-0x00000000025A0000-0x00000000025A1000-memory.dmp

    Filesize

    4KB

  • memory/3492-21-0x00000000025F0000-0x00000000025F1000-memory.dmp

    Filesize

    4KB

  • memory/3492-22-0x00000000025B0000-0x00000000025B1000-memory.dmp

    Filesize

    4KB

  • memory/3492-23-0x00000000025C0000-0x00000000025C1000-memory.dmp

    Filesize

    4KB

  • memory/3492-24-0x00000000025D0000-0x00000000025D1000-memory.dmp

    Filesize

    4KB

  • memory/3492-25-0x0000000002550000-0x0000000002551000-memory.dmp

    Filesize

    4KB

  • memory/3492-26-0x0000000002A70000-0x0000000002A72000-memory.dmp

    Filesize

    8KB

  • memory/3492-27-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3492-29-0x00000000024D0000-0x00000000024D1000-memory.dmp

    Filesize

    4KB

  • memory/3492-30-0x0000000002AE0000-0x0000000002AE1000-memory.dmp

    Filesize

    4KB

  • memory/3492-28-0x0000000002AD0000-0x0000000002AD1000-memory.dmp

    Filesize

    4KB

  • memory/3492-31-0x0000000002590000-0x0000000002591000-memory.dmp

    Filesize

    4KB

  • memory/3492-32-0x00000000022C0000-0x00000000022C1000-memory.dmp

    Filesize

    4KB

  • memory/3492-33-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/3492-34-0x0000000002AC0000-0x0000000002AC1000-memory.dmp

    Filesize

    4KB

  • memory/3492-35-0x0000000002AB0000-0x0000000002AB1000-memory.dmp

    Filesize

    4KB

  • memory/3492-36-0x0000000002AA0000-0x0000000002AA1000-memory.dmp

    Filesize

    4KB

  • memory/3492-37-0x0000000000400000-0x0000000000484000-memory.dmp

    Filesize

    528KB

  • memory/3492-38-0x00000000022D0000-0x000000000231B000-memory.dmp

    Filesize

    300KB