Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
15/06/2024, 09:17
General
-
Target
2e4cae61f994f471d0b7fc86b42dcf2e0c64694ced20bdaa9ddc3dbb3e29e66f.exe
-
Size
5.3MB
-
MD5
f1651ef397cc039f348b78abd57c0770
-
SHA1
ed1ee89814ba7bf37780dfcddfd11475ebb86226
-
SHA256
2e4cae61f994f471d0b7fc86b42dcf2e0c64694ced20bdaa9ddc3dbb3e29e66f
-
SHA512
179d27a2dcd0ea37ab5bfdec4b05a529833d0ae0a77fa34d28c89e6b4b312b5db482c5d70cd242b71b70f59d2f7bc805215460a95405259f20f2a27713b2992c
-
SSDEEP
98304:aYlVnMGaIg3ZVfR3WcZ6k2G8N6mMUQ1dpkyAmHxN7cMjWq1padd4Zho:aYLMGMBRGcQk2G8iHAmHHUqXad
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e4cae61f994f471d0b7fc86b42dcf2e0c64694ced20bdaa9ddc3dbb3e29e66f.exe"C:\Users\Admin\AppData\Local\Temp\2e4cae61f994f471d0b7fc86b42dcf2e0c64694ced20bdaa9ddc3dbb3e29e66f.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
13.9MB
-
Filesize
4KB
-
Filesize
13.9MB
-
Filesize
2.2MB
-
Filesize
13.9MB