Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
17/03/2024, 20:31
General
- Target d1cc9c3dfe7a71d641ead1f15911a697b5daa63a6a2ce7030a22d947d9847d91.exe
- Size 340KB
- Sample240317-za79rafh7x
- SHA256 d1cc9c3dfe7a71d641ead1f15911a697b5daa63a6a2ce7030a22d947d9847d91
Malware Config
Signatures
- VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1cc9c3dfe7a71d641ead1f15911a697b5daa63a6a2ce7030a22d947d9847d91.exe"C:\Users\Admin\AppData\Local\Temp\d1cc9c3dfe7a71d641ead1f15911a697b5daa63a6a2ce7030a22d947d9847d91.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1528-0-0x0000000000DB0000-0x0000000000E46000-memory.dmp
memory/1528-1-0x0000000075320000-0x0000000075AD0000-memory.dmp
memory/1528-2-0x0000000009B10000-0x0000000009BA2000-memory.dmp
memory/1528-3-0x0000000009BB0000-0x0000000009C16000-memory.dmp
memory/1528-4-0x0000000005660000-0x00000000056D6000-memory.dmp
memory/1528-5-0x0000000005780000-0x000000000581C000-memory.dmp
memory/1528-6-0x0000000005DD0000-0x0000000006374000-memory.dmp
memory/1528-8-0x00000000055C0000-0x00000000055C1000-memory.dmp
memory/1528-7-0x00000000055C0000-0x00000000055C1000-memory.dmp
memory/1528-9-0x0000000009C50000-0x0000000009C60000-memory.dmp
memory/1528-10-0x0000000075320000-0x0000000075AD0000-memory.dmp
memory/1528-11-0x00000000055C0000-0x00000000055C1000-memory.dmp
memory/1528-12-0x0000000009C50000-0x0000000009C60000-memory.dmp