Overview

overview

8

Static

static

8

1.exe

windows7-x64

8

1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1.exe

  • Size

    14.3MB

  • Sample

    220929-pzmdgaahb8

  • MD5

    757b2df3931f87e24cbdbdf67e1e7054

  • SHA1

    a7251d17ca8196a47ad1c2c9e0dcfc10ab33b165

  • SHA256

    5e5c7bd4f29a5626735e69a1a1b3a0bb88d88e427fc5c6fd74c36bd0313195ab

  • SHA512

    41e8785f2ccaf42583cc159db84d3668fcadf3835b384a9a00de0909528f480984ed6d8286af92ede91081e0a51fa07cc93ff6d8d07bd6177f7049c8b9401453

  • SSDEEP

    393216:xIqRQ7QTCe3RAEKoWPpKalQftDpsCzppyY6+:KECARAp5PpvlytDpxpI+

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      1.exe

    • Size

      14.3MB

    • MD5

      757b2df3931f87e24cbdbdf67e1e7054

    • SHA1

      a7251d17ca8196a47ad1c2c9e0dcfc10ab33b165

    • SHA256

      5e5c7bd4f29a5626735e69a1a1b3a0bb88d88e427fc5c6fd74c36bd0313195ab

    • SHA512

      41e8785f2ccaf42583cc159db84d3668fcadf3835b384a9a00de0909528f480984ed6d8286af92ede91081e0a51fa07cc93ff6d8d07bd6177f7049c8b9401453

    • SSDEEP

      393216:xIqRQ7QTCe3RAEKoWPpKalQftDpsCzppyY6+:KECARAp5PpvlytDpxpI+

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks