Analysis
-
max time kernel
33s -
max time network
34s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
09-09-2024 02:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VixenFree.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
VixenFree.exe
Resource
win11-20240802-en
windows11-21h2-x64
2 signatures
150 seconds
General
-
Target
VixenFree.exe
-
Size
5.0MB
-
MD5
d01b973626d00211d1b261d8f3ddd52e
-
SHA1
bc39e4337fa6b8e8858f394c21c7daaf82ab6e01
-
SHA256
f0ce3f4bc62c51f8c5a778a37053c004243e844b0d76689279c5b0b5795929b2
-
SHA512
569a437c36dfefd9f130608178caafbc3ce4f24d1fb797f1245b470c480473d4fb77550e98fab3614734e5da7ce613856667afdc01a15fe93c79b86c7a0f3bbd
-
SSDEEP
98304:R+JOLQFh3L9BUu7jTetDhKQA+uNr/vjpbO1YYpagMp5s+M0GkXUFM8:R+J3JWu7jQDvuF/vjp4YAf+MJJ
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1120 VixenFree.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1120 VixenFree.exe 1120 VixenFree.exe