Analysis
-
max time kernel
148s -
max time network
160s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
02/12/2024, 16:10
General
-
Target
tmpfile-main/Hybris_gamesnusSafe.exe
-
Size
5.2MB
-
MD5
17fc0571c8eca741bd868070125a9269
-
SHA1
245f3fb7c21a7d94060cc77026c8dd9702596c8b
-
SHA256
e6d9bda848025b550e4360cffb1942b5e3d73277958739c78689131e512644ab
-
SHA512
6731ee46aabcea6e9aa14328f5781a91b69a9f6e2b2ba72f7c4a1e83a307ed4be831adec1d7806f45c9e43a55537f79f9260e2bb621782bcc3a2b7fc955559bb
-
SSDEEP
98304:4T7G9lRQ2jnhuaEYXvoMmYC9IC+LaXrLSecpl1rlHGA5dStV2kqr1u:4TMbqYXva9VHSPX1xmAGAhu
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmpfile-main\Hybris_gamesnusSafe.exe"C:\Users\Admin\AppData\Local\Temp\tmpfile-main\Hybris_gamesnusSafe.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.4MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8.7MB
-
Filesize
8.7MB
-
Filesize
3.4MB