General

  • Target

    8358aed9bce2171e04b08ac8fa1c58fc3bd09c65437c5c477e85d7c18c7e5e63

  • Size

    5.4MB

  • Sample

    221123-t671zagb39

  • MD5

    c2cfb01fd089a439e82248438c440bcb

  • SHA1

    586b99f37c6c6e343af2306b089ced23f25cea0f

  • SHA256

    8358aed9bce2171e04b08ac8fa1c58fc3bd09c65437c5c477e85d7c18c7e5e63

  • SHA512

    4507f14047270d754b6265cf7de15bf467ca1cd5c67e35186613437912abfbd7bb7c8016dc2388ac796cc2035fbc26e876b626c31c7eb83fcb709fc750e62db5

  • SSDEEP

    98304:aPS9V4jwJLxpFm8ffbqMEeGmGUCWQqdci7hMsWgyg2AAxGyBbd3hDlwELl:x9V7hr0oqcCYciFMngeQyBbJhaE5

Score
8/10

Malware Config

Targets

    • Target

      Fx0615A.exe

    • Size

      6.2MB

    • MD5

      7919deda7d3d14e89a1c9b33ab0b2144

    • SHA1

      8d6e3f79b262ae23fac6ca61f518b07e9444e2c5

    • SHA256

      4047fe0f67ee9b016176742aee2d6e47cc223304db6959352f73971a73f3d97b

    • SHA512

      643de235129a6760e8787e77068ed5208e98fe48303ec5a6cbf923674d7a4ef6b00b7a8fb21e4461e65b8634c39f00adc12e433b192267b77cf6b43e1792b9df

    • SSDEEP

      196608:OMn6HA/5xX740dyyWl9uFIWcQ1H3G9qrW2FTGv:OMn6gRxr40AyWyFIWczBGG

    Score
    8/10
    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      艾艾游戏网.url

    • Size

      205B

    • MD5

      75cdf710a1e5a1622a18202480f58cdb

    • SHA1

      6c6ba6622aa65f9c9f04e8779efcb627465eb6d2

    • SHA256

      8cab5f470f701142fd3d2df08ae4f25b6e790c7ad3271cdda4b4d3ecfcae058b

    • SHA512

      4f0d9ad7b6aa30e736008bb71486a65b8b497c363735573fad6886115e7754f28e0a002449c113f5d32d5fae723b150c50433ae84082bda633f3459f07e4457d

    Score
    1/10

MITRE ATT&CK Matrix

Tasks