Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
23/04/2026, 06:01
General
- Target Space Auth.vmp.exe
- Size 9.9MB
- Sample260423-graqpscw5w
- SHA256 d26b84cac237c07b79bda48593a33a70eacc076c4ae4e0d1fb4eb6d028ace4ea
Malware Config
Signatures
- VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Space Auth.vmp.exe"C:\Users\Admin\AppData\Local\Temp\Space Auth.vmp.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3644-4-0x00007FFC3CD60000-0x00007FFC3CD62000-memory.dmp
memory/3644-3-0x00007FF6E0EC6000-0x00007FF6E18B9000-memory.dmp
memory/3644-2-0x00007FFC3CD50000-0x00007FFC3CD52000-memory.dmp
memory/3644-1-0x00007FFC3CD40000-0x00007FFC3CD42000-memory.dmp
memory/3644-0-0x00007FFC3CD30000-0x00007FFC3CD32000-memory.dmp
memory/3644-5-0x00007FFC3CD70000-0x00007FFC3CD72000-memory.dmp
memory/3644-6-0x00007FFC3CD80000-0x00007FFC3CD82000-memory.dmp
memory/3644-8-0x00007FFC3CDA0000-0x00007FFC3CDA2000-memory.dmp
memory/3644-9-0x00007FFC3CDB0000-0x00007FFC3CDB2000-memory.dmp
memory/3644-7-0x00007FFC3CD90000-0x00007FFC3CD92000-memory.dmp
memory/3644-10-0x00007FFC3CDC0000-0x00007FFC3CDC2000-memory.dmp
memory/3644-11-0x00007FFC3CDD0000-0x00007FFC3CDD2000-memory.dmp
memory/3644-12-0x00007FFC3CDE0000-0x00007FFC3CDE2000-memory.dmp
memory/3644-13-0x00007FFC3CDF0000-0x00007FFC3CDF2000-memory.dmp
memory/3644-17-0x0000028194B50000-0x000002819506B000-memory.dmp
memory/3644-16-0x00007FFC3CE20000-0x00007FFC3CE22000-memory.dmp
memory/3644-15-0x00007FFC3CE10000-0x00007FFC3CE12000-memory.dmp
memory/3644-14-0x00007FFC3CE00000-0x00007FFC3CE02000-memory.dmp
memory/3644-23-0x0000028194B50000-0x000002819506B000-memory.dmp
memory/3644-38-0x0000028195070000-0x0000028195113000-memory.dmp
memory/3644-37-0x0000028194B20000-0x0000028194B3A000-memory.dmp
memory/3644-31-0x0000028194B20000-0x0000028194B3A000-memory.dmp
memory/3644-30-0x00007FF6E0E60000-0x00007FF6E2296000-memory.dmp
memory/3644-24-0x0000028195070000-0x0000028195113000-memory.dmp
memory/3644-39-0x00007FF6E0E60000-0x00007FF6E2296000-memory.dmp
memory/3644-42-0x0000028195070000-0x0000028195113000-memory.dmp
memory/3644-48-0x00000281931B0000-0x00000281932D0000-memory.dmp
memory/3644-49-0x0000028195470000-0x000002819547C000-memory.dmp
memory/3644-50-0x00007FF6E0EC6000-0x00007FF6E18B9000-memory.dmp
memory/3644-51-0x00007FF6E0E60000-0x00007FF6E2296000-memory.dmp