Virtualization / Sandbox Evasion
Hidden Window
Software Packing
Dynamic Analysis Report
Created 3 years ago
10101010.exe
Windows Exe (x86-32)
VMRay Threat Identifiers (9 rules, 18 matches)
| Score | Category | Operation | Count | Classification | |
|---|---|---|---|---|---|
5/5 | Data Collection | Tries to read cached credentials of various applications | 1 | Spyware | |
2/5 | Data Collection | Reads sensitive ftp data | 2 | - | |
2/5 | Data Collection | Reads sensitive application data | 1 | - | |
2/5 | System Modification | Changes the desktop wallpaper | 1 | - | |
2/5 | Masquerade | Creates a new process from a system binary | 1 | - | |
1/5 | Anti Analysis | Tries to detect analyzer sandbox | 1 | - | |
1/5 | Hide Tracks | Creates process with hidden window | 9 | - | |
1/5 | Obfuscation | Resolves API functions dynamically | 1 | - | |
1/5 | Crash | An unmonitored process crashed | 1 | - |
Screenshots
Monitored Processes
MITRE ATT&CK™ Matrix - Windows
ActiveAll
Version: 2019-04-25 20:53:07.719000
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Credentials in Files
Discovery
File and Directory Discovery
Virtualization / Sandbox Evasion
System Time Discovery
Lateral Movement
Collection
Automated Collection
Data from Local System
Command and Control
Exfiltration
Impact
Defacement
Sample Information
| ID | #3869281 |
| MD5 | |
| SHA1 | |
| SHA256 | |
| SSDeep | |
| ImpHash | |
| File Name | 10101010.exe |
| File Size | 308.00 KB |
| Sample Type | Windows Exe (x86-32) |
Analysis Information
| Creation Time | 2022-03-22 11:03 (UTC+) |
| Analysis Duration | 00:04:00 |
| Termination Reason | Timeout |
| Number of Monitored Processes | 13 |
| Execution Successful | |
| Reputation Enabled | |
| Built-in AV Enabled | |
| Number of AV Matches | 0 |
| YARA Enabled | |
| Number of YARA Matches | 0 |
