Overview

overview

8

Static

static

8

5be25a9472...71.exe

windows7-x64

8

5be25a9472...71.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5be25a94729b627fe120053a8c6076a62074dc81ee27af1883e951d150408b71

  • Size

    1.2MB

  • Sample

    221124-k2lgqsdb29

  • MD5

    d15c44dfcf8c645bfd58de688e2ef89f

  • SHA1

    c7211e7e547a58ee5bd0de718639608653c1815a

  • SHA256

    5be25a94729b627fe120053a8c6076a62074dc81ee27af1883e951d150408b71

  • SHA512

    43a000dd5bbb4c1380abe8eab0fb2414191da069b98387bd0eab5e38ce43d4c79fc142939b4c873eb77c34aee08d04a93a99f668cbaa7baf869db717cc1e9c4d

  • SSDEEP

    24576:oTncNfx9X01rFQgq2cNFrGRe3tYTuP2ZNH+LxWqHa5bBMx/np6mmERSM:oTcNwBVvcNV8wtaZeLxWZ2x/nr

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      5be25a94729b627fe120053a8c6076a62074dc81ee27af1883e951d150408b71

    • Size

      1.2MB

    • MD5

      d15c44dfcf8c645bfd58de688e2ef89f

    • SHA1

      c7211e7e547a58ee5bd0de718639608653c1815a

    • SHA256

      5be25a94729b627fe120053a8c6076a62074dc81ee27af1883e951d150408b71

    • SHA512

      43a000dd5bbb4c1380abe8eab0fb2414191da069b98387bd0eab5e38ce43d4c79fc142939b4c873eb77c34aee08d04a93a99f668cbaa7baf869db717cc1e9c4d

    • SSDEEP

      24576:oTncNfx9X01rFQgq2cNFrGRe3tYTuP2ZNH+LxWqHa5bBMx/np6mmERSM:oTcNwBVvcNV8wtaZeLxWZ2x/nr

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks