Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21-09-2024 20:30
General
-
Target
c6c1169f8c9214adb5039beed7dbf11b14dbeb3b5880bc75456ab3eb2341bffa.exe
-
Size
2.6MB
-
MD5
e3c686bef11ce49537662d0e6a0eac97
-
SHA1
443dc9cfb087d2073d11b93c7a98e9288f7a8d96
-
SHA256
c6c1169f8c9214adb5039beed7dbf11b14dbeb3b5880bc75456ab3eb2341bffa
-
SHA512
62768ee3e1771e84be31bb7830bb25d0a9b38c8dc4f9471c99517a8ddac9c53b56c9aa8cc06564d7a41aeb3c5d2c896ad3fc83e2192f1f0843b317c181c1115c
-
SSDEEP
49152:t6TpILyKlVL3ZSmKCLwJuGm5VfReRKURt++zVjBJTXjLkPiYpxd8sll:tGpIL5lVLUmpdGm5VoRn0qVjnvWiYjWG
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 16 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6c1169f8c9214adb5039beed7dbf11b14dbeb3b5880bc75456ab3eb2341bffa.exe"C:\Users\Admin\AppData\Local\Temp\c6c1169f8c9214adb5039beed7dbf11b14dbeb3b5880bc75456ab3eb2341bffa.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.2MB
-
Filesize
2.2MB
-
Filesize
6.2MB