Overview

overview

8

Static

static

8

3078b7bb32...d1.dll

windows7-x64

8

3078b7bb32...d1.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3078b7bb3260fd7caa95d8f2cb64891f803bbd487105ef48742fc2e6f63b6bd1

  • Size

    1.3MB

  • Sample

    221029-w1dahsadcj

  • MD5

    84186baeda5a7160f6678ebc6bef147d

  • SHA1

    5be06271eedd785357251b5cde5c282896f7e1b8

  • SHA256

    3078b7bb3260fd7caa95d8f2cb64891f803bbd487105ef48742fc2e6f63b6bd1

  • SHA512

    119ab89dfa0994c59e42d5467daad37f4bb63e7144fb58ae1f19af20bd6c8d1ab283da148fe3d083955bed7dfb364bfbc3f700a36953bd874fb698c079bdd5f4

  • SSDEEP

    24576:Q87Zc1bIZYbbX2qtLmU61Jfbz8axrEgK+QHV6sFi8/B0TsU2R2eHVzvdQ:X7Zc1bIMbptK1Jfbz88wwQHVRVB0TsUj

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      3078b7bb3260fd7caa95d8f2cb64891f803bbd487105ef48742fc2e6f63b6bd1

    • Size

      1.3MB

    • MD5

      84186baeda5a7160f6678ebc6bef147d

    • SHA1

      5be06271eedd785357251b5cde5c282896f7e1b8

    • SHA256

      3078b7bb3260fd7caa95d8f2cb64891f803bbd487105ef48742fc2e6f63b6bd1

    • SHA512

      119ab89dfa0994c59e42d5467daad37f4bb63e7144fb58ae1f19af20bd6c8d1ab283da148fe3d083955bed7dfb364bfbc3f700a36953bd874fb698c079bdd5f4

    • SSDEEP

      24576:Q87Zc1bIZYbbX2qtLmU61Jfbz8axrEgK+QHV6sFi8/B0TsU2R2eHVzvdQ:X7Zc1bIMbptK1Jfbz88wwQHVRVB0TsUj

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks