Overview

overview

8

Static

static

8

18d2db5257...2c.dll

windows7-x64

5

18d2db5257...2c.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18d2db52576ef0f7711256cfbc31ccc5ad8bb9b1a729d702ec07046e08b24c2c

  • Size

    142KB

  • Sample

    221123-zdtkrsce97

  • MD5

    a4aec66afeec77b507b87d5e9956c7fe

  • SHA1

    8481cc4e2daa07f79039b15c565f9ed416e44d15

  • SHA256

    18d2db52576ef0f7711256cfbc31ccc5ad8bb9b1a729d702ec07046e08b24c2c

  • SHA512

    283b4bcffd33531957368ee94683ec95327f0d854a0c5b453b4381cf4a6e214b156ccdbfc6e326199d6dd74696ed6c69c68422dfd1700224d41391776252d826

  • SSDEEP

    3072:Jb6dmDS43k8QFvSxMoj1xGL7oZGexwi/YCRGgDkZaTBw0i:d6dmO40jFvSxMQ6L8FxwiUR2BC

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      18d2db52576ef0f7711256cfbc31ccc5ad8bb9b1a729d702ec07046e08b24c2c

    • Size

      142KB

    • MD5

      a4aec66afeec77b507b87d5e9956c7fe

    • SHA1

      8481cc4e2daa07f79039b15c565f9ed416e44d15

    • SHA256

      18d2db52576ef0f7711256cfbc31ccc5ad8bb9b1a729d702ec07046e08b24c2c

    • SHA512

      283b4bcffd33531957368ee94683ec95327f0d854a0c5b453b4381cf4a6e214b156ccdbfc6e326199d6dd74696ed6c69c68422dfd1700224d41391776252d826

    • SSDEEP

      3072:Jb6dmDS43k8QFvSxMoj1xGL7oZGexwi/YCRGgDkZaTBw0i:d6dmO40jFvSxMQ6L8FxwiUR2BC

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks