Overview

overview

8

Static

static

8

d417a5d2e0...c4.exe

windows7-x64

8

d417a5d2e0...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d417a5d2e0c76de43ae59643a269062156250dfd0342b7229eddc7510e893dc4

  • Size

    356KB

  • Sample

    221123-xdytdaef95

  • MD5

    363aea3b89afbc222f29e4a29163442c

  • SHA1

    a9a584028b5e344598d5eec594c9cc15e5801f98

  • SHA256

    d417a5d2e0c76de43ae59643a269062156250dfd0342b7229eddc7510e893dc4

  • SHA512

    0dbcbe454498dc1946fb2c067f94dc927a3e9bb4b8a8f0033b1df768822205331fd0486abf6b850f9462b83841aae225ab1f865b4c71991dea8a6792f072c02c

  • SSDEEP

    6144:StHf0c6XKGOX0L8XxLzXiSM7iQraNXNEJBmYZUY5MbiZ49tLZVoJZJbnBTGilTpR:St8soL8XxLXMsXNEvlkV9d3GZJbnBiiC

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      d417a5d2e0c76de43ae59643a269062156250dfd0342b7229eddc7510e893dc4

    • Size

      356KB

    • MD5

      363aea3b89afbc222f29e4a29163442c

    • SHA1

      a9a584028b5e344598d5eec594c9cc15e5801f98

    • SHA256

      d417a5d2e0c76de43ae59643a269062156250dfd0342b7229eddc7510e893dc4

    • SHA512

      0dbcbe454498dc1946fb2c067f94dc927a3e9bb4b8a8f0033b1df768822205331fd0486abf6b850f9462b83841aae225ab1f865b4c71991dea8a6792f072c02c

    • SSDEEP

      6144:StHf0c6XKGOX0L8XxLzXiSM7iQraNXNEJBmYZUY5MbiZ49tLZVoJZJbnBTGilTpR:St8soL8XxLXMsXNEvlkV9d3GZJbnBiiC

    Score
    8/10
    vmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks