Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
29-06-2024 20:43
Behavioral task
behavioral1
Sample
42bab8ecb29311439096423fa807a83d31bb1b02ec17d502cd423360a28a17b2.exe
Resource
win7-20240419-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
42bab8ecb29311439096423fa807a83d31bb1b02ec17d502cd423360a28a17b2.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
42bab8ecb29311439096423fa807a83d31bb1b02ec17d502cd423360a28a17b2.exe
-
Size
1.7MB
-
MD5
1d45a01e3413546c1358fcdcb76b3f28
-
SHA1
858d1c8a57eeedda57a274bdb80fa0239cee2793
-
SHA256
42bab8ecb29311439096423fa807a83d31bb1b02ec17d502cd423360a28a17b2
-
SHA512
d42b0e92f4d4c224249850ed37f44218b824431be84900596e9a17f537b4113d39e25dad356695e7a229c030e43b2636a625d3d6b1fcad3317cc37db26e2d499
-
SSDEEP
24576:r7gydJUXRyRZq+b3MGepIu0zdptQqo0hhY:r0GJWYd3MUu0tZ
Score
7/10
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/1648-0-0x0000000140000000-0x0000000140187000-memory.dmp vmprotect behavioral1/memory/1648-6-0x0000000140000000-0x0000000140187000-memory.dmp vmprotect
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1648-0-0x0000000140000000-0x0000000140187000-memory.dmpFilesize
1.5MB
-
memory/1648-3-0x0000000076D80000-0x0000000076F29000-memory.dmpFilesize
1.7MB
-
memory/1648-2-0x0000000076D80000-0x0000000076F29000-memory.dmpFilesize
1.7MB
-
memory/1648-1-0x0000000076DD1000-0x0000000076DD2000-memory.dmpFilesize
4KB
-
memory/1648-4-0x0000000076D80000-0x0000000076F29000-memory.dmpFilesize
1.7MB
-
memory/1648-5-0x0000000076D80000-0x0000000076F29000-memory.dmpFilesize
1.7MB
-
memory/1648-6-0x0000000140000000-0x0000000140187000-memory.dmpFilesize
1.5MB