Overview

overview

8

Static

static

8

134acaedb1...72.exe

windows7_x64

8

134acaedb1...72.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    134acaedb1d9ec907997116d7857de72.exe
  • Size 10.2MB
  • Sample210620-ycqdl2nkcs
  • SHA256 bc06c918fab5afbb61d15611dedadbc9012cf9e4979e9d3f261a9046c306bb87
  • MD5 SHA1 SHA512
Score
8/10
upxvmprotect

Malware Config

Targets

    • Target
      134acaedb1d9ec907997116d7857de72.exe
    • Size 10.2MB
    • SHA256 bc06c918fab5afbb61d15611dedadbc9012cf9e4979e9d3f261a9046c306bb87
    • MD5 SHA1 SHA512
    Score
    8/10
    vmprotectupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Deletes itself

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks