d71279d97daf5603d9c3d2d409ce00ee746eb41b8c8ceb3450f7bdc590847976 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
54baf2ca95fb219f3566092eed65a16d.exe
Size 3.5MB
Sample220523-vmd48agbc9
SHA256 d71279d97daf5603d9c3d2d409ce00ee746eb41b8c8ceb3450f7bdc590847976
MD5 54baf2ca95fb219f3566092eed65a16d
SHA1 fafc1ba8877666276eb9e87734b22e09a092203a
SHA512 4140aa4f8120051d577efa2f7ea95aa701639ed6cf2be4a33be7fe5d91dfd2579b54522c8c5be39c999a85fc3f23d0e16d23889b2d68d80e363087fa8140843b
MD5 SHA1 SHA512

Score

8^/10

vmprotect

Malware Config

Targets

- Target
  54baf2ca95fb219f3566092eed65a16d.exe
- Size 3.5MB
- SHA256 d71279d97daf5603d9c3d2d409ce00ee746eb41b8c8ceb3450f7bdc590847976
- MD5 54baf2ca95fb219f3566092eed65a16d
- SHA1 fafc1ba8877666276eb9e87734b22e09a092203a
- SHA512 4140aa4f8120051d577efa2f7ea95aa701639ed6cf2be4a33be7fe5d91dfd2579b54522c8c5be39c999a85fc3f23d0e16d23889b2d68d80e363087fa8140843b
- MD5 SHA1 SHA512
Score

8^/10

vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2