Overview

overview

8

Static

static

8

4ffa4159a9...10.exe

windows7-x64

8

4ffa4159a9...10.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ffa4159a9d68c344f8969eab8b38bc7eac3ad8014221174157fb5e36d919710

  • Size

    4.8MB

  • Sample

    221125-kvtvjaab81

  • MD5

    abfaaa13c6ac217cca27b3b57da24b1b

  • SHA1

    426fee01e711ba2e9fd5d24eecc91c6190363c09

  • SHA256

    4ffa4159a9d68c344f8969eab8b38bc7eac3ad8014221174157fb5e36d919710

  • SHA512

    5365e1f45ed6b6a2f94b198a6e96a6dd9f5e900bf5a48739710cccad86ce0d2d42193b4a7eb8d7c4b4a7d2f3e34996446d175f7fd5eb08a6b46ff40d2e1db066

  • SSDEEP

    98304:Flp/68lxG8XCR4v4VB4a9Xu2hgAOi3Wqojykg5mtFuyQO6+Yx1S0f+TdICQ:HN68lI0Zv48a5u2hZOiujyv5OFuy1RYx

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      4ffa4159a9d68c344f8969eab8b38bc7eac3ad8014221174157fb5e36d919710

    • Size

      4.8MB

    • MD5

      abfaaa13c6ac217cca27b3b57da24b1b

    • SHA1

      426fee01e711ba2e9fd5d24eecc91c6190363c09

    • SHA256

      4ffa4159a9d68c344f8969eab8b38bc7eac3ad8014221174157fb5e36d919710

    • SHA512

      5365e1f45ed6b6a2f94b198a6e96a6dd9f5e900bf5a48739710cccad86ce0d2d42193b4a7eb8d7c4b4a7d2f3e34996446d175f7fd5eb08a6b46ff40d2e1db066

    • SSDEEP

      98304:Flp/68lxG8XCR4v4VB4a9Xu2hgAOi3Wqojykg5mtFuyQO6+Yx1S0f+TdICQ:HN68lI0Zv48a5u2hZOiujyv5OFuy1RYx

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks