Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19-03-2024 14:02
General
-
Target
d64acd447bf7f3a5ad3909bd9ab00a0a.exe
-
Size
2.9MB
-
MD5
d64acd447bf7f3a5ad3909bd9ab00a0a
-
SHA1
90320e8a5b491ad15d23af4fc74e9175cf0bb387
-
SHA256
69e325d32bf8d64553277c3336cffc5227cf93b8e16d104b43d1b9989dd0c8a2
-
SHA512
c6771d2e2892f7b7f90ff571ca2d04c27ad227853467f5dd9d719d6cb4001de86348196d4a7bf5888f8cc4eb7d9882ea7a39fec7fa3807c9601b22f4ac5de5e8
-
SSDEEP
49152:H7AvGFkgPmuW0FeddcYE/p/dhCS5lPgOGZpW8Vc7wOpaBAW7+2PSZPvzi/lB4YFQ:7PkXjcYE/ddhr3cOMBz7PPiHzcT4A5
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d64acd447bf7f3a5ad3909bd9ab00a0a.exe"C:\Users\Admin\AppData\Local\Temp\d64acd447bf7f3a5ad3909bd9ab00a0a.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.8MB
-
Filesize
5.8MB
-
Filesize
5.8MB