Analysis

  • max time kernel
    137s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25-05-2024 18:57

General

  • Target

    927fdaf3269a17376002597bf9555d794dc03a788e37a9d3d65cbbb854e23deb.exe

  • Size

    12.3MB

  • MD5

    d1c7321968346f4d3fc70987c52b39b0

  • SHA1

    aac41602b40996ae09cdb507a4b5b60215f292ad

  • SHA256

    927fdaf3269a17376002597bf9555d794dc03a788e37a9d3d65cbbb854e23deb

  • SHA512

    98c3866a43d8bb9013e4c22e7610f6e3ddd0ee543ce46021e553e5460b60ba73261a7598f6140ca80bb35165f09b98625d78e237f4c98eecda0e6bb63ea9688a

  • SSDEEP

    393216:h7nshIU8B4ZWZH48oGD7zMKt1G3Zl4i2qyLGb:yhd8B4Zts7z5Il4i2TL8

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 6 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\927fdaf3269a17376002597bf9555d794dc03a788e37a9d3d65cbbb854e23deb.exe
    "C:\Users\Admin\AppData\Local\Temp\927fdaf3269a17376002597bf9555d794dc03a788e37a9d3d65cbbb854e23deb.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Cab30A4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar30B6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • memory/1740-29-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/1740-43-0x0000000000400000-0x0000000001905000-memory.dmp

    Filesize

    21.0MB

  • memory/1740-7-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1740-9-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1740-12-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/1740-14-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/1740-17-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1740-34-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/1740-32-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/1740-30-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/1740-4-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/1740-5-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1740-19-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1740-22-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1740-24-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1740-35-0x0000000000400000-0x0000000001905000-memory.dmp

    Filesize

    21.0MB

  • memory/1740-38-0x0000000000A06000-0x00000000010AD000-memory.dmp

    Filesize

    6.7MB

  • memory/1740-39-0x0000000000400000-0x0000000001905000-memory.dmp

    Filesize

    21.0MB

  • memory/1740-40-0x0000000000400000-0x0000000001905000-memory.dmp

    Filesize

    21.0MB

  • memory/1740-41-0x0000000000400000-0x0000000001905000-memory.dmp

    Filesize

    21.0MB

  • memory/1740-42-0x0000000000400000-0x0000000001905000-memory.dmp

    Filesize

    21.0MB

  • memory/1740-27-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/1740-0-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/1740-2-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB