Overview

overview

8

Static

static

8

4728de2ccc...03.exe

windows7-x64

8

4728de2ccc...03.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4728de2ccc6d5d62c3e7e967c9c643fccce4118e2b07ee508fb96104d78ac903

  • Size

    151KB

  • Sample

    221106-g9jrbsgbc5

  • MD5

    1cf81570531e21436ead7058ef7b4e90

  • SHA1

    be986c8e0a03ab8503944f4e6a91accbc6c9a185

  • SHA256

    4728de2ccc6d5d62c3e7e967c9c643fccce4118e2b07ee508fb96104d78ac903

  • SHA512

    d3afc3b0a53471785c8793779684043ed89e3bb855a95c4f7374e2e273f37c49ab73c8b8d91fba065106dc6779f49bb3accfe2ee6b2b0e26fcab855b04803ef7

  • SSDEEP

    3072:/rDefAsZkYQjMsEBIpBQZTsFcEPhIfR2TD88xTevgVjI:/rCoNYcXpyZTsCEPC2TD88EiI

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      4728de2ccc6d5d62c3e7e967c9c643fccce4118e2b07ee508fb96104d78ac903

    • Size

      151KB

    • MD5

      1cf81570531e21436ead7058ef7b4e90

    • SHA1

      be986c8e0a03ab8503944f4e6a91accbc6c9a185

    • SHA256

      4728de2ccc6d5d62c3e7e967c9c643fccce4118e2b07ee508fb96104d78ac903

    • SHA512

      d3afc3b0a53471785c8793779684043ed89e3bb855a95c4f7374e2e273f37c49ab73c8b8d91fba065106dc6779f49bb3accfe2ee6b2b0e26fcab855b04803ef7

    • SSDEEP

      3072:/rDefAsZkYQjMsEBIpBQZTsFcEPhIfR2TD88xTevgVjI:/rCoNYcXpyZTsCEPC2TD88EiI

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks