Analysis
-
max time kernel
95s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11-09-2024 23:52
General
-
Target
外挂/神魔小歪.exe
-
Size
908KB
-
MD5
be1158125dd46829c4cc16b878479bb3
-
SHA1
ec5753674cbca7d9dc597ab23462c2b3b637c086
-
SHA256
91c679b47080781c9921051fb4dd4e9939017cdccd7588c9026b380fdc857dcb
-
SHA512
3a04af5244452ed5d47a0c0b13c38959030478b70391a965405913ddfc4e558df44d7c0f53ec3d35c9fbd0fd6d2ad581706e6818d7d3e5f3b814e09c0d333a98
-
SSDEEP
24576:EaVDwfUEnjzO/aWPfjLPzxLZedu1yoZkT0Iykw:HDwjTWjz7edu1yWkLykw
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\外挂\神魔小歪.exe"C:\Users\Admin\AppData\Local\Temp\外挂\神魔小歪.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB