General

  • Target

    3804203118158dac706edb66e87fff60bdc90a67f98afb30a8bced4277e2951c

  • Size

    2.4MB

  • Sample

    221123-zhxg8aga4z

  • MD5

    b8e349ea57aa9a123dc85e428b735447

  • SHA1

    cc7363dc05ae8145ba358befb7bf0cf9ad7d448f

  • SHA256

    3804203118158dac706edb66e87fff60bdc90a67f98afb30a8bced4277e2951c

  • SHA512

    913ad8408e1f681d5f2845a278c43accf2dd6405c241e97cadbe93147570ec353081b59c3a0ab3384fdb66cf9c3303b7772cb00c42283f152d16daf34ba908df

  • SSDEEP

    49152:w88DCdXh8WboRRbgHBy9SqsIdwHJqK4F51nirWJ+:Z8edH8RRbgkdmqKCzirWJ

Score
8/10

Malware Config

Targets

    • Target

      3804203118158dac706edb66e87fff60bdc90a67f98afb30a8bced4277e2951c

    • Size

      2.4MB

    • MD5

      b8e349ea57aa9a123dc85e428b735447

    • SHA1

      cc7363dc05ae8145ba358befb7bf0cf9ad7d448f

    • SHA256

      3804203118158dac706edb66e87fff60bdc90a67f98afb30a8bced4277e2951c

    • SHA512

      913ad8408e1f681d5f2845a278c43accf2dd6405c241e97cadbe93147570ec353081b59c3a0ab3384fdb66cf9c3303b7772cb00c42283f152d16daf34ba908df

    • SSDEEP

      49152:w88DCdXh8WboRRbgHBy9SqsIdwHJqK4F51nirWJ+:Z8edH8RRbgkdmqKCzirWJ

    Score
    8/10
    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks