Overview

overview

8

Static

static

41b660e5e3...ea.dll

windows7-x64

8

41b660e5e3...ea.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41b660e5e3e0af00a8b8a78bc18e9c691781d0a0ebab9fe54bdc0918dc0bc6ea

  • Size

    4.6MB

  • Sample

    221125-jvtzvsga2w

  • MD5

    f42201e1867d4b345373296577d40035

  • SHA1

    b691363aa20b1d7681c7557a6aa40f3596416555

  • SHA256

    41b660e5e3e0af00a8b8a78bc18e9c691781d0a0ebab9fe54bdc0918dc0bc6ea

  • SHA512

    4fac587eaa45e085b210b55164f928493af98911addc429772e5a45d5b205635ff846264a07e529a5d13d20f0b7ac2042139f44a036c3a2dae6f933f307461e6

  • SSDEEP

    98304:4STCsrzPn/z33xlGTvgLkbYWtYAMrbL3uxEqO0c5l:4SpzP/z378vokb8AMrbL+xEj0cT

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      41b660e5e3e0af00a8b8a78bc18e9c691781d0a0ebab9fe54bdc0918dc0bc6ea

    • Size

      4.6MB

    • MD5

      f42201e1867d4b345373296577d40035

    • SHA1

      b691363aa20b1d7681c7557a6aa40f3596416555

    • SHA256

      41b660e5e3e0af00a8b8a78bc18e9c691781d0a0ebab9fe54bdc0918dc0bc6ea

    • SHA512

      4fac587eaa45e085b210b55164f928493af98911addc429772e5a45d5b205635ff846264a07e529a5d13d20f0b7ac2042139f44a036c3a2dae6f933f307461e6

    • SSDEEP

      98304:4STCsrzPn/z33xlGTvgLkbYWtYAMrbL3uxEqO0c5l:4SpzP/z378vokb8AMrbL+xEj0cT

    Score
    8/10
    vmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks