Overview

overview

8

Static

static

8

5d8cd7711e...8a.exe

windows7-x64

8

5d8cd7711e...8a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d8cd7711e8df82f888e96eb8f08548431120f9a2edcfc51127a8331bb4d218a

  • Size

    2.0MB

  • Sample

    221125-lf16qsgb29

  • MD5

    308ba50b58f386adfc787ca380002cd1

  • SHA1

    1172a6183ae0a119cb7c0aa0bd910b24dde15a2f

  • SHA256

    5d8cd7711e8df82f888e96eb8f08548431120f9a2edcfc51127a8331bb4d218a

  • SHA512

    7158d0e5f562a5f5fe1eef8e12b95222f1b08c962311aa73f81fca8ca1621e84711891584859b47b44fbadf1e95e3c1b0b9644d13592b100f26df727e4d90e29

  • SSDEEP

    49152:f4EheAoP8dmPTRuITqGMbZ22tDR0YeHjJzrteTqAQ7vKwHSO:fDOdMbZ2id0YYJzrBv

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      5d8cd7711e8df82f888e96eb8f08548431120f9a2edcfc51127a8331bb4d218a

    • Size

      2.0MB

    • MD5

      308ba50b58f386adfc787ca380002cd1

    • SHA1

      1172a6183ae0a119cb7c0aa0bd910b24dde15a2f

    • SHA256

      5d8cd7711e8df82f888e96eb8f08548431120f9a2edcfc51127a8331bb4d218a

    • SHA512

      7158d0e5f562a5f5fe1eef8e12b95222f1b08c962311aa73f81fca8ca1621e84711891584859b47b44fbadf1e95e3c1b0b9644d13592b100f26df727e4d90e29

    • SSDEEP

      49152:f4EheAoP8dmPTRuITqGMbZ22tDR0YeHjJzrteTqAQ7vKwHSO:fDOdMbZ2id0YYJzrBv

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks