Analysis
-
max time kernel
300s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
04-07-2024 17:59
General
-
Target
vmdestroyer.exe
-
Size
723KB
-
MD5
de7a4bbcaa7cfd08acc6868c59a11577
-
SHA1
ef84be5b53a77fd9bb8ab5d000f72f8c9c0a7291
-
SHA256
16636e50367a0ec90607ba0d1bccc31c08b9dc4cd104c1a77982a201b4d135e7
-
SHA512
e7272017c817ac8aa1c6aa87261d571ded274aea4f0550264eda7f10a1681a0300b61420f3c3b549fec564b707f3a86122e38941690d99fa26c16c6e351ed00b
-
SSDEEP
12288:JozGdX0M4ornOmZIzfMwHHQmRROXKTHVVlXPmu5OA4Kp:J4GHnhIzOaZVloA4Kp
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 64 IoCs
-
Suspicious use of SendNotifyMessage 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\vmdestroyer.exe"C:\Users\Admin\AppData\Local\Temp\vmdestroyer.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2204-0-0x0000000000DE0000-0x0000000000F76000-memory.dmpFilesize
1.6MB
-
memory/2204-1-0x0000000000DE0000-0x0000000000F76000-memory.dmpFilesize
1.6MB