Overview

overview

8

Static

static

8

47112d76f4...08.exe

windows7-x64

8

47112d76f4...08.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47112d76f41b2eb912eef8a21181361d63d9d2c28d0063f78da1278878b4fa08

  • Size

    2.3MB

  • Sample

    221123-zb4b7afe6x

  • MD5

    ebc54e88a8aac16f8cdf2dc3391b389c

  • SHA1

    4e6832a09df6cf6319c3998f2ad5b2c08e41198c

  • SHA256

    47112d76f41b2eb912eef8a21181361d63d9d2c28d0063f78da1278878b4fa08

  • SHA512

    2c4ff7bf32747d7e6e2b82a7fdceed37a9047c90a48d64a2e270e8c05e2e9e9ac96ead8f67c0131e1560796846474b0cbdb8618b27b9ba48fdb9337546b09131

  • SSDEEP

    49152:UmjHkb9DZfQ2AyoXZ9i0hanVA/rFDY96supFG:3EZDJ9op9XanV+ry6supF

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      47112d76f41b2eb912eef8a21181361d63d9d2c28d0063f78da1278878b4fa08

    • Size

      2.3MB

    • MD5

      ebc54e88a8aac16f8cdf2dc3391b389c

    • SHA1

      4e6832a09df6cf6319c3998f2ad5b2c08e41198c

    • SHA256

      47112d76f41b2eb912eef8a21181361d63d9d2c28d0063f78da1278878b4fa08

    • SHA512

      2c4ff7bf32747d7e6e2b82a7fdceed37a9047c90a48d64a2e270e8c05e2e9e9ac96ead8f67c0131e1560796846474b0cbdb8618b27b9ba48fdb9337546b09131

    • SSDEEP

      49152:UmjHkb9DZfQ2AyoXZ9i0hanVA/rFDY96supFG:3EZDJ9op9XanV+ry6supF

    Score
    8/10
    upxvmprotect

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks