Analysis
-
max time kernel
94s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 19:22
General
-
Target
CrazySploit/ForlornInject.dll
-
Size
6.3MB
-
MD5
6d9c8971c2b99866e32cfe2438269490
-
SHA1
ddfb0023f230f2aa247cad3ada03e863739bd5ca
-
SHA256
bad099e3a1dd5bcb48606d3b0a7d7399f5c2b4af9f9b0dfa3dba6b7451da14ed
-
SHA512
f1c79b02a980c0c989b950ec2bcaae15c0f476d5675bcc58b8266a555f4bb46688d84d90b5e87bc4abf9e212d7c88406066994317bca4998b901ae4382d4b1b2
-
SSDEEP
98304:pSO6zBrjT8/GMwg8I222UYbRNqylblygjSR5GDN09aBq/NkTxbCypypUsAkrbc:pSO6pA/GMw3IyfPHN5TN5yy1qc
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\CrazySploit\ForlornInject.dll,#11⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
2.7MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
15.0MB
-
Filesize
2.7MB