Overview

overview

8

Static

static

8

2a4fe9d132...aa.exe

windows7-x64

8

2a4fe9d132...aa.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a4fe9d13286ca2c68ee2aee593cbcdc85022e661fc4359a90462f08f9983caa

  • Size

    934KB

  • Sample

    221124-hkcr6aaa2t

  • MD5

    d47908522a67ea24cfd04d87023693a7

  • SHA1

    56d67ab71d1b9fabb174dca43f53dbca0b68b11d

  • SHA256

    2a4fe9d13286ca2c68ee2aee593cbcdc85022e661fc4359a90462f08f9983caa

  • SHA512

    690a8117d48b3a2597b618b1dec3bc29416146b11e4edcff277fe9580c6ba5ebe255e2e2500c5655c150785d2ccb3bb1c64fed1e9a605c5237641af274bb5c62

  • SSDEEP

    24576:AjJFUlQBk7MsTMiwgupiRTIzcrqEK7+bIsx2:0UMJgTRTI4rr1

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      2a4fe9d13286ca2c68ee2aee593cbcdc85022e661fc4359a90462f08f9983caa

    • Size

      934KB

    • MD5

      d47908522a67ea24cfd04d87023693a7

    • SHA1

      56d67ab71d1b9fabb174dca43f53dbca0b68b11d

    • SHA256

      2a4fe9d13286ca2c68ee2aee593cbcdc85022e661fc4359a90462f08f9983caa

    • SHA512

      690a8117d48b3a2597b618b1dec3bc29416146b11e4edcff277fe9580c6ba5ebe255e2e2500c5655c150785d2ccb3bb1c64fed1e9a605c5237641af274bb5c62

    • SSDEEP

      24576:AjJFUlQBk7MsTMiwgupiRTIzcrqEK7+bIsx2:0UMJgTRTI4rr1

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks