Overview

overview

8

Static

static

8

12.dll

windows7_x64

8

12.dll

windows10_x64

8

exe.exe

windows7_x64

3

exe.exe

windows10_x64

3

libeay32.dll

windows7_x64

1

libeay32.dll

windows10_x64

1

sql.dll

windows7_x64

3

sql.dll

windows10_x64

3

ssleay32.dll

windows7_x64

1

ssleay32.dll

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9874fdb517afe0221d2ed253b64e5c05b8af19e5dcc2b4df4d88a5cbae1a1091

  • Size

    11.4MB

  • Sample

    220128-x7tfrabehk

  • MD5

    890f655129da01e213982d0ff1722846

  • SHA1

    536b49d9f8f83efd99a8b855e56fd70dacf9bc76

  • SHA256

    9874fdb517afe0221d2ed253b64e5c05b8af19e5dcc2b4df4d88a5cbae1a1091

  • SHA512

    82e40a7e6b036a742616e152eb2de80a1aa1d869d00e61f7f1f089d74ce201b3a05f65850be4ed6d0283b181c4e77d09d08c49bb6f41912509352a61cd06398e

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      12.dll

    • Size

      10.0MB

    • MD5

      ed6933897c37cfd9a323e177bcb11707

    • SHA1

      51123a4b4d3323d01aff81a132314bf1df641008

    • SHA256

      a33c96cd2767ab3bff433e90b499c83ff9cba6b16f52797c05ea4fc534a9b1bf

    • SHA512

      409bb25c6daef90dfdb0961ed6c4857b6a70bac2f2928b3fd1398ec608c9b31927d8e1ec30a25d8b347669d29471d7debcd18a82a97b9e6dd4c2af851934340a

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

    • Target

      exe.png

    • Size

      872KB

    • MD5

      c56b5f0201a3b3de53e561fe76912bfd

    • SHA1

      2a4062e10a5de813f5688221dbeb3f3ff33eb417

    • SHA256

      237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

    • SHA512

      195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

    Score
    3/10
    behavioral3behavioral4

    • Target

      libeay32.dll

    • Size

      1.3MB

    • MD5

      905ed724736240737ef98e62917a3bc7

    • SHA1

      c6382c38a48231d73985183b4cdfc034c621ad4e

    • SHA256

      963b313eb11d5ea78d9d5f4e03df9265e472db892a4b406ee73f0216fd4d6f38

    • SHA512

      74ece6db443ddfd0d316b4a94f7cb99281907a3927087b55d527fb3f84d857fdd00dd164453e3bb58babc37d54a38e8d37f13ff211ac2d2ad55fa4792e06362f

    Score
    1/10
    behavioral5behavioral6

    • Target

      sql.png

    • Size

      849KB

    • MD5

      87f9e5a6318ac1ec5ee05aa94a919d7a

    • SHA1

      7a9956e8de89603dba99772da29493d3fd0fe37d

    • SHA256

      7705b87603e0d772e1753441001fcf1ac2643ee41bf14a8177de2c056628665c

    • SHA512

      c45c03176142918e34f746711e83384572bd6a8ed0a005600aa4a18cf22eade06c76eda190b37db49ec1971c4649e086affd19eee108c5f405df27c0c8cb23d2

    Score
    3/10
    behavioral7behavioral8

    • Target

      ssleay32.dll

    • Size

      349KB

    • MD5

      cf2c57dda3766c204c398430da23693d

    • SHA1

      9938cbf4b5e7cffa0d73825a6ef85b0d90a0ce0a

    • SHA256

      492f045643354c8b9fa11673b6c32cdbb33779826a729ce55de5901279c1f6d5

    • SHA512

      e83e33b5bc9161351daaaae8e9130d83568d85b4a4ab190730e9558ddad199091f5b3acb3e1060dad5ec840a74f8b6781a086f49b7a1ecb6f82fc1cc265c536a

    Score
    1/10
    behavioral9behavioral10

MITRE ATT&CK Enterprise v6

Tasks