Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27-09-2024 06:44
General
-
Target
VMProtect 3.8.1/VMProtect.exe
-
Size
31.0MB
-
MD5
458b66803268730581f3465adb827f25
-
SHA1
7c53722819e44f870d742f68b8225ca2d6c4daca
-
SHA256
83dd117888092caf1b940c62fc6a8164b73deaed6d090c015ecac7878afbbbab
-
SHA512
65a21e476c6c8def889df024863cb170d3d33e899d905344cd392226d64920636f0ecc63168b32cb745efe097bc4c8a33669a04ecb42a578b19038cc85eb7905
-
SSDEEP
786432:PZVqD0sPPmguJBvV7eiPw4fx19FSP1lTij:Tq0sH7EN5M1lQ
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VMProtect 3.8.1\VMProtect.exe"C:\Users\Admin\AppData\Local\Temp\VMProtect 3.8.1\VMProtect.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.7MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
79.2MB
-
Filesize
79.2MB
-
Filesize
79.2MB
-
Filesize
12.7MB
-
Filesize
79.2MB