Overview

overview

8

Static

static

8

28b4bee809...79.dll

windows7-x64

8

28b4bee809...79.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28b4bee809849a0206dab1618e4d471e887c9344b5852ede895cd6862f573279

  • Size

    5.7MB

  • Sample

    220806-hmp59sbgbp

  • MD5

    0c1f5ed66819d2e2c6ef7abcced5ce6a

  • SHA1

    26bc4206d03a4bbad833221c6ac56a9914d4c887

  • SHA256

    28b4bee809849a0206dab1618e4d471e887c9344b5852ede895cd6862f573279

  • SHA512

    7447c813dc005ca4217ba99ea10a02f6b3cbee5d6376acf571be28bf0883595399c4ae0bc5372ffc4b1cb7ac266681078e7b48d8f73994edc3a61f0510b3affc

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      28b4bee809849a0206dab1618e4d471e887c9344b5852ede895cd6862f573279

    • Size

      5.7MB

    • MD5

      0c1f5ed66819d2e2c6ef7abcced5ce6a

    • SHA1

      26bc4206d03a4bbad833221c6ac56a9914d4c887

    • SHA256

      28b4bee809849a0206dab1618e4d471e887c9344b5852ede895cd6862f573279

    • SHA512

      7447c813dc005ca4217ba99ea10a02f6b3cbee5d6376acf571be28bf0883595399c4ae0bc5372ffc4b1cb7ac266681078e7b48d8f73994edc3a61f0510b3affc

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks