Overview

overview

8

Static

static

8

601b0419c6...2c.exe

windows7-x64

8

601b0419c6...2c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    601b0419c6e59e61497672413f82ac313b1f900c45c48084dfca0fbb86a1bb2c

  • Size

    912KB

  • Sample

    221106-g9ht2aafcr

  • MD5

    3035685ae56dc2cd96c72ff284170280

  • SHA1

    0309089c080c9ac31ef5f372b3653bfce6708bdd

  • SHA256

    601b0419c6e59e61497672413f82ac313b1f900c45c48084dfca0fbb86a1bb2c

  • SHA512

    05dd3f36e2bd4fd89a4d5e1da63fd9de6a11c6fb18210dde9e316c30f783f73e7e4d41ffb5b82d35bc55bf9b8876b0038e86517e31ec8c0c59e75aae6f5aadc2

  • SSDEEP

    12288:hPmRkED02oHmlYJffb8ISHW4BbcQnsijS48XVS:huRkYUmlYJfD8VHhBbcQnZjBCVS

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      601b0419c6e59e61497672413f82ac313b1f900c45c48084dfca0fbb86a1bb2c

    • Size

      912KB

    • MD5

      3035685ae56dc2cd96c72ff284170280

    • SHA1

      0309089c080c9ac31ef5f372b3653bfce6708bdd

    • SHA256

      601b0419c6e59e61497672413f82ac313b1f900c45c48084dfca0fbb86a1bb2c

    • SHA512

      05dd3f36e2bd4fd89a4d5e1da63fd9de6a11c6fb18210dde9e316c30f783f73e7e4d41ffb5b82d35bc55bf9b8876b0038e86517e31ec8c0c59e75aae6f5aadc2

    • SSDEEP

      12288:hPmRkED02oHmlYJffb8ISHW4BbcQnsijS48XVS:huRkYUmlYJfD8VHhBbcQnZjBCVS

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks