Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
25/05/2024, 13:36
General
-
Target
ea271630ba3f7ee25ba504fa9697c66ce14efe7efc2a21de34b67a26b3e5442e.exe
-
Size
728KB
-
MD5
82edcde55505ba7b5a2a0f6e6652542f
-
SHA1
e8c04ec314cff225a292a7ff48bb7d874bbf10af
-
SHA256
ea271630ba3f7ee25ba504fa9697c66ce14efe7efc2a21de34b67a26b3e5442e
-
SHA512
2b449e64af95525a294a66acd9b56b0155bf79c3a06fe01b922d9cd74dc62fa271b612203284547cf1085ef6430bf585654d05e8777076aae978f3734bc44fab
-
SSDEEP
12288:fgudMFIV5yvRdKYRv5qA5TzeFPUPxqs8jpf3jRTJqaCvLN5vn1tXsnn23sGKc87e:3yFI+vR8YR7VqF3jF3jl87jskspc8xFF
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea271630ba3f7ee25ba504fa9697c66ce14efe7efc2a21de34b67a26b3e5442e.exe"C:\Users\Admin\AppData\Local\Temp\ea271630ba3f7ee25ba504fa9697c66ce14efe7efc2a21de34b67a26b3e5442e.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2024 -s 2202⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
2.2MB