Overview

overview

8

Static

static

8

3a2469fac3...4b.exe

windows7-x64

8

3a2469fac3...4b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a2469fac36fb1a0b834a28f9a246f796ae8ea8dd29ad5ffd06cddfc0216854b

  • Size

    628KB

  • Sample

    221002-2fs35afaak

  • MD5

    6beebe243202c60a78b0dbfda6928880

  • SHA1

    d0b8e201dcf7c03582d4189c972c2e565ace4cc9

  • SHA256

    3a2469fac36fb1a0b834a28f9a246f796ae8ea8dd29ad5ffd06cddfc0216854b

  • SHA512

    3dbe811c71eb92bb494a301e39b55dc319d2eaa3f0a9514c73801ac048c7452f0dbf0f942fa177fa5e80464a5ac2c6d81f6c21470c9d704028ac71ba5df0f88e

  • SSDEEP

    12288:Xt04zbis3aCmxeKDjFGR5UevWe6uE7EvauDoHxen:XtnjaYKDj4RN8uE7Eni4

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      3a2469fac36fb1a0b834a28f9a246f796ae8ea8dd29ad5ffd06cddfc0216854b

    • Size

      628KB

    • MD5

      6beebe243202c60a78b0dbfda6928880

    • SHA1

      d0b8e201dcf7c03582d4189c972c2e565ace4cc9

    • SHA256

      3a2469fac36fb1a0b834a28f9a246f796ae8ea8dd29ad5ffd06cddfc0216854b

    • SHA512

      3dbe811c71eb92bb494a301e39b55dc319d2eaa3f0a9514c73801ac048c7452f0dbf0f942fa177fa5e80464a5ac2c6d81f6c21470c9d704028ac71ba5df0f88e

    • SSDEEP

      12288:Xt04zbis3aCmxeKDjFGR5UevWe6uE7EvauDoHxen:XtnjaYKDj4RN8uE7Eni4

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks