Overview

overview

10

Static

static

10

7_zip_installer.exe

windows7-x64

8

CHOCORAT.exe

windows7-x64

10

ChrisMessage.exe

windows7-x64

1

Free Porn.exe

windows7-x64

1

Gay Porn Mailer.exe

windows7-x64

1

GottaWork.exe

windows7-x64

PleaseWork.exe

windows7-x64

THING.exe

windows7-x64

7

Technoturn...AT.exe

windows7-x64

1

Verified by Visa.exe

windows7-x64

10

abwsx1.exe

windows7-x64

7

eee.exe

windows7-x64

1

hypno.exe

windows7-x64

8

mbam-setup...00.exe

windows7-x64

8

molesto.exe

windows7-x64

1

runme.exe

windows7-x64

7

setup.exe

windows7-x64

3

sevgi.exe

windows7-x64

6

shrek.exe

windows7-x64

8

upnp.exe

windows7-x64

7

virus.exe

windows7-x64

10

vmdestroyer.exe

windows7-x64

7

Analysis

  • max time kernel
    300s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04-07-2024 17:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    vmdestroyer.exe

  • Size

    723KB

  • MD5

    de7a4bbcaa7cfd08acc6868c59a11577

  • SHA1

    ef84be5b53a77fd9bb8ab5d000f72f8c9c0a7291

  • SHA256

    16636e50367a0ec90607ba0d1bccc31c08b9dc4cd104c1a77982a201b4d135e7

  • SHA512

    e7272017c817ac8aa1c6aa87261d571ded274aea4f0550264eda7f10a1681a0300b61420f3c3b549fec564b707f3a86122e38941690d99fa26c16c6e351ed00b

  • SSDEEP

    12288:JozGdX0M4ornOmZIzfMwHHQmRROXKTHVVlXPmu5OA4Kp:J4GHnhIzOaZVloA4Kp

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\vmdestroyer.exe
    "C:\Users\Admin\AppData\Local\Temp\vmdestroyer.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2204-0-0x0000000000DE0000-0x0000000000F76000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/2204-1-0x0000000000DE0000-0x0000000000F76000-memory.dmp

    Filesize

    1.6MB

    Download