Overview

overview

8

Static

static

8

12.dll

windows7_x64

8

12.dll

windows10-2004_x64

8

exe.exe

windows7_x64

3

exe.exe

windows10-2004_x64

3

libeay32.dll

windows7_x64

1

libeay32.dll

windows10-2004_x64

1

sql.dll

windows7_x64

3

sql.dll

windows10-2004_x64

3

ssleay32.dll

windows7_x64

1

ssleay32.dll

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37d4d9321823a05f90dfc1266c9162df214748e8b243cda967dfe307901dce2d

  • Size

    11.4MB

  • Sample

    220625-1xca9sfge7

  • MD5

    cdb90c5c543ec3c3cfd3ff2ab9e5073d

  • SHA1

    f8bbcacce163b2f5c78bb369708aa90a91015350

  • SHA256

    37d4d9321823a05f90dfc1266c9162df214748e8b243cda967dfe307901dce2d

  • SHA512

    411f3fc2f0723f536162a255d9707364595057135e0abf2c1382eb84c70109394bf7e9fa46069c43f75ea0b06862cdc193c0a52f231f823dfda6dbd8907b30f3

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      12.dll

    • Size

      10.0MB

    • MD5

      6048e9361c3789c78ef93a9291beacc5

    • SHA1

      cf8a05ba0aef127e811414b7ae1059b1755512de

    • SHA256

      fbb8125816b672c13c34305ba11aa5fc175fa032a6d53604c52d1dd4d7751446

    • SHA512

      4e5112c24635ef0fd37cec17d4a46fb376aa083b6eec3777b22899d289fe6966704b6595535fa64258c4afec1f92c7dada89fc8696a66539919f236ee0b9cc2f

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

    • Target

      exe.png

    • Size

      872KB

    • MD5

      c56b5f0201a3b3de53e561fe76912bfd

    • SHA1

      2a4062e10a5de813f5688221dbeb3f3ff33eb417

    • SHA256

      237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

    • SHA512

      195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

    Score
    3/10
    behavioral3behavioral4

    • Target

      libeay32.dll

    • Size

      1.3MB

    • MD5

      905ed724736240737ef98e62917a3bc7

    • SHA1

      c6382c38a48231d73985183b4cdfc034c621ad4e

    • SHA256

      963b313eb11d5ea78d9d5f4e03df9265e472db892a4b406ee73f0216fd4d6f38

    • SHA512

      74ece6db443ddfd0d316b4a94f7cb99281907a3927087b55d527fb3f84d857fdd00dd164453e3bb58babc37d54a38e8d37f13ff211ac2d2ad55fa4792e06362f

    Score
    1/10
    behavioral5behavioral6

    • Target

      sql.png

    • Size

      849KB

    • MD5

      87f9e5a6318ac1ec5ee05aa94a919d7a

    • SHA1

      7a9956e8de89603dba99772da29493d3fd0fe37d

    • SHA256

      7705b87603e0d772e1753441001fcf1ac2643ee41bf14a8177de2c056628665c

    • SHA512

      c45c03176142918e34f746711e83384572bd6a8ed0a005600aa4a18cf22eade06c76eda190b37db49ec1971c4649e086affd19eee108c5f405df27c0c8cb23d2

    Score
    3/10
    behavioral7behavioral8

    • Target

      ssleay32.dll

    • Size

      349KB

    • MD5

      cf2c57dda3766c204c398430da23693d

    • SHA1

      9938cbf4b5e7cffa0d73825a6ef85b0d90a0ce0a

    • SHA256

      492f045643354c8b9fa11673b6c32cdbb33779826a729ce55de5901279c1f6d5

    • SHA512

      e83e33b5bc9161351daaaae8e9130d83568d85b4a4ab190730e9558ddad199091f5b3acb3e1060dad5ec840a74f8b6781a086f49b7a1ecb6f82fc1cc265c536a

    Score
    1/10
    behavioral9behavioral10

MITRE ATT&CK Enterprise v6

Tasks