Overview

overview

8

Static

static

8

HaloSparta....0.exe

windows7-x64

8

HaloSparta....0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15aeff8ce0c28040cf065522a05a183d9d588588c55f532746c23d0c4cbadd53

  • Size

    2.6MB

  • Sample

    221124-l94tqaah6t

  • MD5

    b8a70e51fb9ab8973ba2df6118855d7f

  • SHA1

    b5a0ffbf114597034ed6f46937f99507b1ac9a42

  • SHA256

    15aeff8ce0c28040cf065522a05a183d9d588588c55f532746c23d0c4cbadd53

  • SHA512

    6d29d81b32b921aab666c9fb4b42c3e67ee02f95cda3f4c450e4cce601d0177d712c21f63a87dd1417a2611cb7fe4bf72c6ae2321e1d406a76eed6d08da14310

  • SSDEEP

    49152:RvH1wcRsxG97P1rH1QWpzZ27arV2KwoL6UVqi2ppBW8zofm8jTESyl2:1Scex0uWpzZ27aQKwoLhVqjpBW8OS4

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      HaloSpartanAssault+6Tr-LNG_v1.0/HaloSpartanAssault+6Tr-LNG_v1.0.exe

    • Size

      2.7MB

    • MD5

      2ab538f0a57e341acbe001ccdb61524b

    • SHA1

      e131455a51f9b82a1da767f03d09f6ab26ffedc7

    • SHA256

      91717699ab8f65a110044d792838943e2ca5cceb6fbc773fcbb0ebcda21bd8a4

    • SHA512

      3f006b7cef8a31907adf29d06c6474720a22683a2c83edb3d87914a4b2b0698d8468c349d75c485ecec853c281d3e3d806f9653dfc6c2acb8b9a3bc82b029a82

    • SSDEEP

      49152:7fmNigGQUrVJkEY0D2SDTNHumrZ0CbbBIr5sDQuuyyT4ObH42OW19gP+9hBHd+32:aNitQ/k2SDTPV7JIpuPOrFj1PZdo3ZEd

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks