Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
27/05/2024, 19:53
General
-
Target
d27d1e130af7a750d094e03e504d702562ebf5e393e922877a73fcb308f245cb.exe
-
Size
2.5MB
-
MD5
b0dccdb3d4f293cfa4bc63b64db0bc48
-
SHA1
3411cc38cc5b15293776d3ae90fde55da62add3f
-
SHA256
d27d1e130af7a750d094e03e504d702562ebf5e393e922877a73fcb308f245cb
-
SHA512
e11be2db23dde669c0b2340195e8bb6aa360703e852640633e2f74408d055d9a9dd7302173cf3d5b3d500b39b33ba92e10a5c04361bbc29693cfe161a2bc0b07
-
SSDEEP
49152:ZcKC7iF9WktmXKCVE5SnLmtFM3Tmaxc5A29r708+ApO74zpId3Of3Epas7:r3TVmTVEEnLoWTVxCLACpId3Of3Gas
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 10 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d27d1e130af7a750d094e03e504d702562ebf5e393e922877a73fcb308f245cb.exe"C:\Users\Admin\AppData\Local\Temp\d27d1e130af7a750d094e03e504d702562ebf5e393e922877a73fcb308f245cb.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3020 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.6MB
-
Filesize
4KB
-
Filesize
6.6MB
-
Filesize
6.6MB
-
Filesize
6.6MB
-
Filesize
6.6MB
-
Filesize
6.6MB
-
Filesize
6.6MB
-
Filesize
6.6MB
-
Filesize
6.6MB
-
Filesize
6.6MB