Analysis
-
max time kernel
95s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 08:15
General
-
Target
无忧考吧计算机等级考试-注册机(1)/UnblockRegdll_WYKB.exe
-
Size
290KB
-
MD5
d3baf10e53083d731cdee0982b088152
-
SHA1
952a609c8fa7d6f989af2f3af7226e13cc26b392
-
SHA256
be0e17127fda99805bf33306bb47b75eb9c2e897d3b627222dfe0add209c8617
-
SHA512
f74b0a28d87c8f5bd6112d574ef362aed21766bf76415d5338965fcc961fc614c56942398ac9de9c62cdf3b22d1e9f945edc19e2d07220bd83c3514138a39931
-
SSDEEP
6144:1SbMVVN5MkkZ8JRvwI0WBCXwa5wYTkiFkJMAJbjrAoiJkJa:rZMkBJqeYtFkJBJfsvr
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\无忧考吧计算机等级考试-注册机(1)\UnblockRegdll_WYKB.exe"C:\Users\Admin\AppData\Local\Temp\无忧考吧计算机等级考试-注册机(1)\UnblockRegdll_WYKB.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
504KB
-
Filesize
136KB
-
Filesize
1.2MB
-
Filesize
24KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB