Analysis
-
max time kernel
149s -
max time network
157s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
02/12/2024, 16:10
General
-
Target
tmpfile-main/Hybris_DeadlySafe.exe
-
Size
5.2MB
-
MD5
92ec446588b008d16d3c0257b211feaa
-
SHA1
35b24b8f87d2e360534711d50c444b37fb372ef3
-
SHA256
152f9fd249079ca448ed89a219de8ccd4eb8d351a525fd39f1cafde3e95cefd8
-
SHA512
78ccb2692a6d3cfaa8c4868030ce66cc93f374a59d5350994ee868f7c00bcc63595979bc6d1e05370a0a26925e799dbabe0352f663a13a732d891eaa2101dd1a
-
SSDEEP
98304:z4b1yOSHUKAt3HppO1mPCQcrZdRbqZJ70GXTCKFUxvl+dOw0j2p:mo1At3HppOwqTZTbqZJ70SCNl+dOw0Cp
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmpfile-main\Hybris_DeadlySafe.exe"C:\Users\Admin\AppData\Local\Temp\tmpfile-main\Hybris_DeadlySafe.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.4MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8.7MB
-
Filesize
3.4MB
-
Filesize
8.7MB