Analysis
-
max time kernel
148s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06-06-2024 14:30
General
-
Target
614f0da323a2b1b728464a35aac419890eb898093aaa731119f5a96fef952f40.exe
-
Size
3.9MB
-
MD5
31088ecd3cd9c7eb3b31fc421f09b677
-
SHA1
2e5bf248caec6679f576cc942c5706f94b00feed
-
SHA256
614f0da323a2b1b728464a35aac419890eb898093aaa731119f5a96fef952f40
-
SHA512
9cd4f3b76ebf764bc87bd528e02dd56da12c8178240a3e8b7ada45e775117483296ea67c84110911b955b06320408babb85827645293ce003b01f85cc78aea2d
-
SSDEEP
98304:YJKSfrDC9NIQW7v7Enra3Jy/yjn3rafFL7c1Js2+mHRCLV:YJ3X6+D7Qrx/Ebaf9oHRC
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 37 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\614f0da323a2b1b728464a35aac419890eb898093aaa731119f5a96fef952f40.exe"C:\Users\Admin\AppData\Local\Temp\614f0da323a2b1b728464a35aac419890eb898093aaa731119f5a96fef952f40.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
284KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB