Overview

overview

8

Static

static

8

28c285656e...31.exe

windows7-x64

8

28c285656e...31.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731

  • Size

    688KB

  • Sample

    221107-ech3esfde5

  • MD5

    0cdd8d1d2925a99e130ba43106d190e0

  • SHA1

    67ad628a010f3de62a0a75d9cba9887aba498580

  • SHA256

    28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731

  • SHA512

    b27244ba4ea311ea544cedcde775dde6c92a7b60998b87a7ba3c7e712b77d25a67089359ba41f4030549073becbc4768f25c48d7a5169cc058a1bf25f08f2f52

  • SSDEEP

    12288:a72CqvKRN7yo7SYDUWnwo18CusrZLVHWaGAbXs1Go9BEq/nyjNCQ9Psudam6:I6a7pSun3tbrJhGArKLwQyjFim6

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731

    • Size

      688KB

    • MD5

      0cdd8d1d2925a99e130ba43106d190e0

    • SHA1

      67ad628a010f3de62a0a75d9cba9887aba498580

    • SHA256

      28c285656ef57f12444c427821e39c88e5dd4bdd6b7d82ec2ca7bedf6d418731

    • SHA512

      b27244ba4ea311ea544cedcde775dde6c92a7b60998b87a7ba3c7e712b77d25a67089359ba41f4030549073becbc4768f25c48d7a5169cc058a1bf25f08f2f52

    • SSDEEP

      12288:a72CqvKRN7yo7SYDUWnwo18CusrZLVHWaGAbXs1Go9BEq/nyjNCQ9Psudam6:I6a7pSun3tbrJhGArKLwQyjFim6

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks