Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-11-2024 19:43
General
-
Target
Avernus/Avernus/ForlornInject.dll
-
Size
6.3MB
-
MD5
6d9c8971c2b99866e32cfe2438269490
-
SHA1
ddfb0023f230f2aa247cad3ada03e863739bd5ca
-
SHA256
bad099e3a1dd5bcb48606d3b0a7d7399f5c2b4af9f9b0dfa3dba6b7451da14ed
-
SHA512
f1c79b02a980c0c989b950ec2bcaae15c0f476d5675bcc58b8266a555f4bb46688d84d90b5e87bc4abf9e212d7c88406066994317bca4998b901ae4382d4b1b2
-
SSDEEP
98304:pSO6zBrjT8/GMwg8I222UYbRNqylblygjSR5GDN09aBq/NkTxbCypypUsAkrbc:pSO6pA/GMw3IyfPHN5TN5yy1qc
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Avernus\Avernus\ForlornInject.dll,#11⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
2.7MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
15.0MB
-
Filesize
820KB