Analysis

  • max time kernel
    130s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-11-2024 06:23

General

  • Target

    840331d219a6b527f51f61b5d6bd803a7ba292086a9bb7956fe3f617de5fdfd0.exe

  • Size

    3.5MB

  • MD5

    3678835db83c7233f9c9c82eb7f7b834

  • SHA1

    e5e7b9110c0d1434e9d6b89a45114b600ce412e9

  • SHA256

    840331d219a6b527f51f61b5d6bd803a7ba292086a9bb7956fe3f617de5fdfd0

  • SHA512

    a8431892faed9d1e03fc6996a1d7d336933cbda96c256eb6191fe34b9abedf5d5b73a29ac6a24ccb0acf68fadc8c5e5a6937646790f0cdb48134e26b3793601e

  • SSDEEP

    98304:IzBst3JT9BfyT6O9+j+PYEje3QSL/XRDebK:OsDau+Xje5zNr

Score
4/10

Malware Config

Signatures

  • Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

    Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\840331d219a6b527f51f61b5d6bd803a7ba292086a9bb7956fe3f617de5fdfd0.exe
    "C:\Users\Admin\AppData\Local\Temp\840331d219a6b527f51f61b5d6bd803a7ba292086a9bb7956fe3f617de5fdfd0.exe"
    1⤵
    • Checks for VirtualBox DLLs, possible anti-VM trick
    • Suspicious behavior: EnumeratesProcesses
    PID:1880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1880-0-0x00007FF7D9FF5000-0x00007FF7DA1FF000-memory.dmp

    Filesize

    2.0MB

  • memory/1880-5-0x00007FF7D9FE0000-0x00007FF7DA58A000-memory.dmp

    Filesize

    5.7MB

  • memory/1880-6-0x00007FF7D9FE0000-0x00007FF7DA58A000-memory.dmp

    Filesize

    5.7MB

  • memory/1880-2-0x00007FF7D9FE0000-0x00007FF7DA58A000-memory.dmp

    Filesize

    5.7MB

  • memory/1880-7-0x00007FF7D9FE0000-0x00007FF7DA58A000-memory.dmp

    Filesize

    5.7MB

  • memory/1880-1-0x00007FFB57FB0000-0x00007FFB57FB2000-memory.dmp

    Filesize

    8KB

  • memory/1880-8-0x00007FF7D9FF5000-0x00007FF7DA1FF000-memory.dmp

    Filesize

    2.0MB