6ec6c457f112de97ece2f7b9c654ffe165ee1fa6bee52f0575dad1426c552a18 (SHA256)
DriverPack-17-Online.exe
Created at 2018-11-07 11:27:00
Notifications (2/2)
The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.
The overall sleep time of all monitored processes was truncated from "10 minutes" to "10 seconds" to reveal dormant functionality.
Severity | Category | Operation | Classification | |
---|---|---|---|---|
4/5
|
Process | Executes encoded PowerShell script | - | |
|
||||
4/5
|
File System | Known malicious file | Downloader | |
|
||||
3/5
|
OS | Modifies system configuration | - | |
|
||||
3/5
|
Browser | Changes security-related browser settings | - | |
|
||||
2/5
|
Anti Analysis | Tries to detect debugger | - | |
|
||||
2/5
|
File System | Known suspicious file | Pua | |
|
||||
|
||||
|
||||
2/5
|
YARA | YARA match | - | |
|
||||
1/5
|
Process | Creates process with hidden window | - | |
|
||||
|
||||
1/5
|
Anti Analysis | Resolves APIs dynamically | - | |
|
||||
1/5
|
Network | Checks Internet connection | - | |
|
||||
1/5
|
Process | Creates system object | - | |
|
||||
|
||||
1/5
|
Information Stealing | Reads system data | Spyware | |
|
||||
1/5
|
File System | Modifies operating system directory | - | |
|
||||
|
||||
|
||||
1/5
|
Network | Downloads data | Downloader | |
|
||||
|
||||
|
||||
|
||||
|
||||
1/5
|
Network | Connects to HTTP server | - | |
|
||||
|
||||
|
||||
|
||||
|
||||
1/5
|
PE | The PE file was created with a packer | - | |
|
||||
|
||||
1/5
|
PE | Drops PE file | Dropper | |
|
||||
1/5
|
PE | Executes dropped PE file | - | |
|