Overview

overview

8

Static

static

8

fee51477c9...d3.exe

windows7-x64

8

fee51477c9...d3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fee51477c9805fe9dc1a1cda9c598fa6b853fb60fafce4d4a4a4002a0cf901d3

  • Size

    612KB

  • Sample

    221123-y992yscc64

  • MD5

    884a33ef39413276cb6d2e29491ad852

  • SHA1

    61713c42ce4b3373d74565c095459404677ca25b

  • SHA256

    fee51477c9805fe9dc1a1cda9c598fa6b853fb60fafce4d4a4a4002a0cf901d3

  • SHA512

    1efec4e0bb48b100260a595608015bf0a4dff8349105f3d67a5d5c657c570399f59f0785aef1a78d7777c0d636da14d7cd65ad9eeb526563f2924b8f8e9ea3b6

  • SSDEEP

    12288:gXvVbUISJIl0bwwAMrXUf4lv4+P9EtepRYbcWM635Q+lIn1r1xpZUe84K+gvhH0Z:wNU3c00CrX3vTP91DY3bJQIIn1r1xIen

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      fee51477c9805fe9dc1a1cda9c598fa6b853fb60fafce4d4a4a4002a0cf901d3

    • Size

      612KB

    • MD5

      884a33ef39413276cb6d2e29491ad852

    • SHA1

      61713c42ce4b3373d74565c095459404677ca25b

    • SHA256

      fee51477c9805fe9dc1a1cda9c598fa6b853fb60fafce4d4a4a4002a0cf901d3

    • SHA512

      1efec4e0bb48b100260a595608015bf0a4dff8349105f3d67a5d5c657c570399f59f0785aef1a78d7777c0d636da14d7cd65ad9eeb526563f2924b8f8e9ea3b6

    • SSDEEP

      12288:gXvVbUISJIl0bwwAMrXUf4lv4+P9EtepRYbcWM635Q+lIn1r1xpZUe84K+gvhH0Z:wNU3c00CrX3vTP91DY3bJQIIn1r1xIen

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks