Overview

overview

8

Static

static

8

59928ad4a8...b1.exe

windows7-x64

8

59928ad4a8...b1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59928ad4a8cd81943f03aa368f6a9cecd797b672726dfa9dd99efeaa251756b1

  • Size

    724KB

  • Sample

    221123-vlqfvscc5t

  • MD5

    b2f073dfef7228c39c6616828bfecc96

  • SHA1

    43b4a0025e4fadbc14889f195c6dde13d497cb2c

  • SHA256

    59928ad4a8cd81943f03aa368f6a9cecd797b672726dfa9dd99efeaa251756b1

  • SHA512

    eddb98c9ffec2163ecf4521f209aabee742d419a22e8ec8af502d5f64ecba215632960528d556597ea6a5bf5c207fb41e4d716d58927f6da994cc78d4704c17a

  • SSDEEP

    12288:OT5864aY0sHGff7WE86sfaCtwlL0PCfR8+tiOtN/4PYY/UxtiT5K5gibV5f6U5Xk:OTwgk8SE86siCtwlL0PCp8yiOtN/AvUt

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      59928ad4a8cd81943f03aa368f6a9cecd797b672726dfa9dd99efeaa251756b1

    • Size

      724KB

    • MD5

      b2f073dfef7228c39c6616828bfecc96

    • SHA1

      43b4a0025e4fadbc14889f195c6dde13d497cb2c

    • SHA256

      59928ad4a8cd81943f03aa368f6a9cecd797b672726dfa9dd99efeaa251756b1

    • SHA512

      eddb98c9ffec2163ecf4521f209aabee742d419a22e8ec8af502d5f64ecba215632960528d556597ea6a5bf5c207fb41e4d716d58927f6da994cc78d4704c17a

    • SSDEEP

      12288:OT5864aY0sHGff7WE86sfaCtwlL0PCfR8+tiOtN/4PYY/UxtiT5K5gibV5f6U5Xk:OTwgk8SE86siCtwlL0PCp8yiOtN/AvUt

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks