0532411d15ff23b27d4f5306264a32e972c0181dcb5ca0fe8a9b6694a2280369 | Triage

Submit
Reports

Overview

overview

Static

static

3

SecuriteIn...09.exe

windows7_x64

SecuriteIn...09.exe

windows10_x64

Sharing

General

Target

SecuriteInfo.com.Trojan.MulDrop17.52128.341.13409
Size

23.6MB
Sample

210805-9hzws9826e
MD5

7cf0b940c39b45217b214ff26e78587f
SHA1

cf21bb7712bdae111632c7a13940351b491343a9
SHA256

0532411d15ff23b27d4f5306264a32e972c0181dcb5ca0fe8a9b6694a2280369
SHA512

896224451ad2c44b0429fc6ce5785476ba1b1527beb9a870630f964ca349064232b45e3d648836b791098fd4888b769f6065aefef306451a67bd38a8537279da

Score

10^/10

evasion pyinstaller trojan vmprotect

Static task

static1

Behavioral task

behavioral1

Sample

SecuriteInfo.com.Trojan.MulDrop17.52128.341.13409.exe

Resource

win7v20210410

evasion trojan vmprotect

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

SecuriteInfo.com.Trojan.MulDrop17.52128.341.13409.exe

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Trojan.MulDrop17.52128.341.13409
- Size
  
  23.6MB
- MD5
  
  7cf0b940c39b45217b214ff26e78587f
- SHA1
  
  cf21bb7712bdae111632c7a13940351b491343a9
- SHA256
  
  0532411d15ff23b27d4f5306264a32e972c0181dcb5ca0fe8a9b6694a2280369
- SHA512
  
  896224451ad2c44b0429fc6ce5785476ba1b1527beb9a870630f964ca349064232b45e3d648836b791098fd4888b769f6065aefef306451a67bd38a8537279da
Score

10^/10

evasion trojan vmprotect
- Modifies security service
  evasion
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Drops startup file
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasiontrojanvmprotect

behavioral2

© 2018-2024

Terms | Privacy