Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21/09/2024, 16:27
General
-
Target
77169.org/ɱ͡AVG-Spyware/̳̹/vmprotect.exe
-
Size
1.2MB
-
MD5
30af37097ef1dc9c3ba7490b651e086e
-
SHA1
f067275926f557c6605b8b3e07b1bcbd596e503d
-
SHA256
ac519422786eabde8c0dffe71c21a29aa592e1ea1f22e9a0472d0cca671645d6
-
SHA512
6c8dee9dd957a9ff4b1c5e85616e1879e524ca751135d6392ee5677ce106da171b53508ea52ed87ec65294cfcc9f7eee0fe9c75fffa4f10b1fd9a0305963092c
-
SSDEEP
24576:qko+ikoPIW5ASChLStaMk+8TO0b4YovDDa/zedvVHoTt6y:qvLpPwLgh4P/wvVHo56
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\77169.org\ɱ͡AVG-Spyware\̳̹\vmprotect.exe"C:\Users\Admin\AppData\Local\Temp\77169.org\ɱ͡AVG-Spyware\̳̹\vmprotect.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
4KB