Overview

overview

8

Static

static

Windows 10 VM

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tester.exe

  • Size

    310KB

  • Sample

    201229-8wh1bxgple

  • MD5

    79caafc8894b767c5553379e4aacc563

  • SHA1

    8cb3a7e1feb699ffbc168c31f39f17e60b567cd6

  • SHA256

    8c49ad1ac17dcca46bbd85d54290e92ab45562fabf518e69f14efa6a814f650b

  • SHA512

    d50c4c94ec84c445822ceab8e188bbbea9593122b558cd214610ab8477c6c97ab028fe2a679e613841eb61418c62972f3bb1d927fa489cbcc9e28c4de7db0be7

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      tester.exe

    • Size

      310KB

    • MD5

      79caafc8894b767c5553379e4aacc563

    • SHA1

      8cb3a7e1feb699ffbc168c31f39f17e60b567cd6

    • SHA256

      8c49ad1ac17dcca46bbd85d54290e92ab45562fabf518e69f14efa6a814f650b

    • SHA512

      d50c4c94ec84c445822ceab8e188bbbea9593122b558cd214610ab8477c6c97ab028fe2a679e613841eb61418c62972f3bb1d927fa489cbcc9e28c4de7db0be7

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks