Overview

overview

8

Static

static

8

bba2002cc1...5b.exe

windows7-x64

8

bba2002cc1...5b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b

  • Size

    552KB

  • Sample

    221028-2c1nsshha5

  • MD5

    0cd33be1333d9d0b750c2f8ef75d8e60

  • SHA1

    572ad9f3ec16962f9343c950a96d1e2064acdf52

  • SHA256

    bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b

  • SHA512

    32228f3bf0ce50a4b6d0df48258e6670a2c56e47b23442e6ddb7973bce2813df1bc2d666f3e25b6f140a0e05c54dd35aae20c6f6d90d0d445d0563c6241a62f6

  • SSDEEP

    12288:/uLY8VilZaEPVVeDWIuj4K1TIisvMLtbQxDO15WXUT6:/u08VilsEPeDWcKGiTdUO15WkT6

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b

    • Size

      552KB

    • MD5

      0cd33be1333d9d0b750c2f8ef75d8e60

    • SHA1

      572ad9f3ec16962f9343c950a96d1e2064acdf52

    • SHA256

      bba2002cc155e7be72e1b4ba3aacf980599967e11d0f3f9ae18aee1ad027a75b

    • SHA512

      32228f3bf0ce50a4b6d0df48258e6670a2c56e47b23442e6ddb7973bce2813df1bc2d666f3e25b6f140a0e05c54dd35aae20c6f6d90d0d445d0563c6241a62f6

    • SSDEEP

      12288:/uLY8VilZaEPVVeDWIuj4K1TIisvMLtbQxDO15WXUT6:/u08VilsEPeDWcKGiTdUO15WkT6

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks