Overview

overview

8

Static

static

8

e82ef3ffcb...ef.exe

windows7-x64

8

e82ef3ffcb...ef.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e82ef3ffcb3dc60936c3375f53342c3c517d9cdb699ab6f2e7271b05354a9fef

  • Size

    8.9MB

  • Sample

    221125-llx19sbh9v

  • MD5

    745917ff9443d6a76fba8ec3c3616cfb

  • SHA1

    073c0616574d189fa0f20a984103f38a0626155c

  • SHA256

    e82ef3ffcb3dc60936c3375f53342c3c517d9cdb699ab6f2e7271b05354a9fef

  • SHA512

    98a6b4917473058a5c97c074810475551cfe5830f7cfe5d6e8c36bd4e0723b6fedadd5c75ea46001c7d2e3195933cee3a700d8fa16a11e0cf42db6db330386ef

  • SSDEEP

    196608:bIUK3cr7WWkjXx2ykU1EU8HFx9Ygg0PODRsl+lLdi1dctqQWVyIEz:bFAcr7W1A6ERPYgTPz+lLdHt9yyv

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      e82ef3ffcb3dc60936c3375f53342c3c517d9cdb699ab6f2e7271b05354a9fef

    • Size

      8.9MB

    • MD5

      745917ff9443d6a76fba8ec3c3616cfb

    • SHA1

      073c0616574d189fa0f20a984103f38a0626155c

    • SHA256

      e82ef3ffcb3dc60936c3375f53342c3c517d9cdb699ab6f2e7271b05354a9fef

    • SHA512

      98a6b4917473058a5c97c074810475551cfe5830f7cfe5d6e8c36bd4e0723b6fedadd5c75ea46001c7d2e3195933cee3a700d8fa16a11e0cf42db6db330386ef

    • SSDEEP

      196608:bIUK3cr7WWkjXx2ykU1EU8HFx9Ygg0PODRsl+lLdi1dctqQWVyIEz:bFAcr7W1A6ERPYgTPz+lLdHt9yyv

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks