Overview

overview

10

Static

static

8

348c0bb72a...2d.exe

windows7-x64

10

348c0bb72a...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    348c0bb72a25fee6f04dd9cf09b7a835d0c7a1a4174b07d07a4c103e1494892d

  • Size

    2.2MB

  • Sample

    221122-1py53adg4x

  • MD5

    00f5c75f01d6ec325a8e8bca61aae9d2

  • SHA1

    68a0bf37e473d63215b812d1b0a7fa2d13257301

  • SHA256

    348c0bb72a25fee6f04dd9cf09b7a835d0c7a1a4174b07d07a4c103e1494892d

  • SHA512

    7ae7ceb6412aa61e5b967f33afbd6fb14f4912396653d3679286055ffa3e425060ec79377b0fdf6ab48893cbfef67bcba7093716708b9d88e46d97af58c67a42

  • SSDEEP

    49152:CygteHdg8RyE3S7hob2HBcCRKgquKYVgtCPgAewAqLj7cPF5aVVvZ5:Cvwd1VOA2hFf7K2QCPpTjgdQx

Score
10/10
phishingupxvmprotect

Malware Config

Targets

    • Target

      348c0bb72a25fee6f04dd9cf09b7a835d0c7a1a4174b07d07a4c103e1494892d

    • Size

      2.2MB

    • MD5

      00f5c75f01d6ec325a8e8bca61aae9d2

    • SHA1

      68a0bf37e473d63215b812d1b0a7fa2d13257301

    • SHA256

      348c0bb72a25fee6f04dd9cf09b7a835d0c7a1a4174b07d07a4c103e1494892d

    • SHA512

      7ae7ceb6412aa61e5b967f33afbd6fb14f4912396653d3679286055ffa3e425060ec79377b0fdf6ab48893cbfef67bcba7093716708b9d88e46d97af58c67a42

    • SSDEEP

      49152:CygteHdg8RyE3S7hob2HBcCRKgquKYVgtCPgAewAqLj7cPF5aVVvZ5:Cvwd1VOA2hFf7K2QCPpTjgdQx

    Score
    10/10
    phishingupxvmprotect

    • Detected phishing page

      phishing

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks