Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
19/07/2024, 10:06
General
-
Target
DdpRpg.exe
-
Size
645KB
-
MD5
1869031687c9c1dbbf52ad5277acba02
-
SHA1
2e33a1e1c78d28ee348f76dc5f39e3bd01d39c2a
-
SHA256
5afe93fd87c1b9f28ff95c344b1e9b1ac7993ccf74d7b02fd1df8312e205fa51
-
SHA512
e851846361f28efd3709a09e14b0dea49543ad723d81c92196d386b1cc6c5da895b73da243f587fa15b7d7e109e7f0253e7bfbfde11f84ac58a70e9eb9fffb95
-
SSDEEP
12288:nXPV4fRzfjxaLGKRWHSjGIK/dMfdSJ72poLA5fCO/OUKrBisRrl3hdo8thY:XcBx1KRJQdWpoE5fCOWxRJ3Ho8thY
Score
7/10
Malware Config
Signatures
-
Themida packer 22 IoCs
Detects Themida, an advanced Windows software protection system.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DdpRpg.exe"C:\Users\Admin\AppData\Local\Temp\DdpRpg.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB