Overview

overview

8

Static

static

8

Documento.dll

windows7-x64

8

Documento.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c953c40a25b6654de7bf078f782fd80caed4490bd46f3026d729f14f11dbd68

  • Size

    600KB

  • Sample

    221125-dxw94sgg77

  • MD5

    db3ea96ac117701e0429cffc7091b6b1

  • SHA1

    680bacaf10f41bd64aac3701185790b398676e0b

  • SHA256

    2c953c40a25b6654de7bf078f782fd80caed4490bd46f3026d729f14f11dbd68

  • SHA512

    f42f4cad77a23d70513cb99675db8c9485c2e8cdfa42e5f75e47997f9aa5398fc08a7769d3878de6e313488ceeec5898e7d9c0e6a6dfb5ae80162b6899704a42

  • SSDEEP

    12288:a3lGIX8gDbE5QP1blIw6IePVbtr2NuV1EmkCPp0sRgzFyfO/QyMGsIN:ilbXHXMqtlIw6Tr93kEpRKzFrcg

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      Documento.cpl

    • Size

      627KB

    • MD5

      67a94068ccdf4124369c8c4f795dd188

    • SHA1

      878aa8246ae0084d1e37e810c83deee3f2371c55

    • SHA256

      645fd5823b27e4d8c592888bf07056878ffa3568f2959aded51d3d95be71913e

    • SHA512

      d60df03d17324450ed2caa012fa0bb1f3f3efdb47ffd91fca954effaaf64fa812d2155f5db8c1f0f1fd3d04e4578b2576e8eceeae5abe46a62ee7bfbd4e58329

    • SSDEEP

      12288:ukZaLNryXCSWKXPl/m25EMICK5YJc+/Qps0ABzRD0xCmzJv6eZrtY4Y3Tz:HZaUXCSWKfl/m25TK/pulDsv6CrtY4Y3

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks