Overview

overview

8

Static

static

8

a4457b1adc...de.dll

windows7-x64

8

a4457b1adc...de.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4457b1adc43844f398383310e0c3b4174f68d2c5e27d8850b8755463d5abade

  • Size

    2.4MB

  • Sample

    221123-yw88habc58

  • MD5

    ed8f57c193cc7662267c4081311126d1

  • SHA1

    9ab0afe819f90bac86134f7d816cac00e1c59092

  • SHA256

    a4457b1adc43844f398383310e0c3b4174f68d2c5e27d8850b8755463d5abade

  • SHA512

    8f081bb656d11d74cbda82625c9063a2b7b3dc229af7acb397fe2a0b50531981c868c3695ef085b09a7b65e8cd646ca836059adc063c12498bc0dfb1c8bf017a

  • SSDEEP

    49152:ILufMzj/JJEx7r2fFlTadi2RfVoew8KvRf24TS0FcdlRYtRVoQebqNmXbi41eee:IyfQvYGlT0i2RyFBTvKdbY/o+4

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      a4457b1adc43844f398383310e0c3b4174f68d2c5e27d8850b8755463d5abade

    • Size

      2.4MB

    • MD5

      ed8f57c193cc7662267c4081311126d1

    • SHA1

      9ab0afe819f90bac86134f7d816cac00e1c59092

    • SHA256

      a4457b1adc43844f398383310e0c3b4174f68d2c5e27d8850b8755463d5abade

    • SHA512

      8f081bb656d11d74cbda82625c9063a2b7b3dc229af7acb397fe2a0b50531981c868c3695ef085b09a7b65e8cd646ca836059adc063c12498bc0dfb1c8bf017a

    • SSDEEP

      49152:ILufMzj/JJEx7r2fFlTadi2RfVoew8KvRf24TS0FcdlRYtRVoQebqNmXbi41eee:IyfQvYGlT0i2RyFBTvKdbY/o+4

    Score
    8/10
    upxvmprotect

    • Blocklisted process makes network request

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks