Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11/07/2024, 06:26
General
-
Target
Agbot.Package/HackshieldStuff/HsServer/ProjectHsBypass1.4.exe
-
Size
176KB
-
MD5
09889a55568567b498067851bc6e89ea
-
SHA1
0a9be3657a72a78a73e1ecf77073d00110c3af24
-
SHA256
0572414b6b30652cc78010b3dcaf0d8fa2c0d3b9783ed6f3131bad6c9b7bb840
-
SHA512
a4dac197ea0e6eb3b2a3f00d5c696901fecaf39cc49afd937d18229f25e52e0611a0aeaba3fb60c79af3499a557cff588dee1e4134a5db40aeb3e94c058e7731
-
SSDEEP
3072:8d8F13nVL11y9bfkrcFMZNGE+efKrvrNW2Pt5zIuaKSOhvZaxt4gFRCFNmzYGo:hF5VL11ikrQINGE+eyrvBvdZR8xbFRgy
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Agbot.Package\HackshieldStuff\HsServer\ProjectHsBypass1.4.exe"C:\Users\Admin\AppData\Local\Temp\Agbot.Package\HackshieldStuff\HsServer\ProjectHsBypass1.4.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
356KB
-
Filesize
356KB
-
Filesize
356KB