Overview

overview

8

Static

static

8

4ed65df9e3...bb.exe

windows7-x64

8

4ed65df9e3...bb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ed65df9e3744ed07c63836e0c76c4adf9d8858f3f2132270c967cd6785cfebb

  • Size

    10.9MB

  • Sample

    221123-zb5j9afe61

  • MD5

    301911b0adeaed9fbd662d1e394f7f5f

  • SHA1

    ec5bb587917ea601f804899536a2c0b59531d9be

  • SHA256

    4ed65df9e3744ed07c63836e0c76c4adf9d8858f3f2132270c967cd6785cfebb

  • SHA512

    1db09c51cc8664c0ae51e220b1bee7fb157d95bf2b6b64d1e95854d155991426a4206b20632448f606f0e4513319b9207014a560a94ee288d16bb54999a8c7fb

  • SSDEEP

    196608:hqFOkolbnEdwOyfqRH2bZJhVWzpJofBNGwkgt2p9qm1:uyodwOVE/h0zpiA7yhm1

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      4ed65df9e3744ed07c63836e0c76c4adf9d8858f3f2132270c967cd6785cfebb

    • Size

      10.9MB

    • MD5

      301911b0adeaed9fbd662d1e394f7f5f

    • SHA1

      ec5bb587917ea601f804899536a2c0b59531d9be

    • SHA256

      4ed65df9e3744ed07c63836e0c76c4adf9d8858f3f2132270c967cd6785cfebb

    • SHA512

      1db09c51cc8664c0ae51e220b1bee7fb157d95bf2b6b64d1e95854d155991426a4206b20632448f606f0e4513319b9207014a560a94ee288d16bb54999a8c7fb

    • SSDEEP

      196608:hqFOkolbnEdwOyfqRH2bZJhVWzpJofBNGwkgt2p9qm1:uyodwOVE/h0zpiA7yhm1

    Score
    8/10
    upxvmprotect

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks