Analysis
-
max time kernel
18s -
max time network
22s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
05/08/2024, 09:49
General
-
Target
Voltage.dll
-
Size
6.5MB
-
MD5
6573ce7970405983186828a58288ff53
-
SHA1
e1c5abfb07a20dfd23d244c69d7ec4c5a880aaf4
-
SHA256
0d20e777de144bc47062c083bbb8e20c2c504c989ebcc7c97c2833c255a6da48
-
SHA512
4f0d9ad54a3473a9cc13ab36dcbdf5b423a872a01169e6bddd2821459005dab2fccbe035c2d6146a4836a22a4c9822183c6ed5ab0630b188ed2d5cd753516777
-
SSDEEP
196608:YN6KheqIwhuvk0dY17DEcWfTVZjpZ6e/a4QSIt/hj:YN6KhekhuvkGOUrTZzy4MZ
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Voltage.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.4MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
14.3MB
-
Filesize
3.4MB
-
Filesize
14.3MB