Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
05-05-2024 00:32
General
-
Target
gfpwsfz/功夫派无双辅助v1.5.vmp.exe
-
Size
2.0MB
-
MD5
09924e5384524fb6d547d0e3625c83be
-
SHA1
8591cbcb6a78d3d34b0e43f26b230b32c644d0a3
-
SHA256
992c43e5ce8d52fb7b00b2e4cd6f1ffea9e18c88c01592b99e2c628596171cf1
-
SHA512
521c1ea49915c985459554fbb5d34227c6c88d9cef854595b1c4132546dcdd953f960fa4fbfe39f07cf99e4d5e6a47ab4ac0f09921b0b1b859112e0b9456328c
-
SSDEEP
49152:txKS/6XdNesu2pqMnu2h6md3iA/ZekDZ+9RzjBz8R3XccuOrcO+j:txKSGdNesuLLEiABlDs9Pa3Xccufj
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\gfpwsfz\功夫派无双辅助v1.5.vmp.exe"C:\Users\Admin\AppData\Local\Temp\gfpwsfz\功夫派无双辅助v1.5.vmp.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.4MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4.4MB
-
Filesize
4KB
-
Filesize
244KB
-
Filesize
4KB
-
Filesize
244KB
-
Filesize
4.4MB