Overview

overview

8

Static

static

8

6566e37de9...63.exe

windows7-x64

8

6566e37de9...63.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6566e37de9f53f9181ed44365f0d92340923feec9e67a7f5a59bb9ef7fd49c63

  • Size

    85KB

  • Sample

    221125-nss21aeb39

  • MD5

    cbf4bfe048428c75658a97636038d4f2

  • SHA1

    8d9683a259e1b2b353d6d172ce1b3a4f3eef3e98

  • SHA256

    6566e37de9f53f9181ed44365f0d92340923feec9e67a7f5a59bb9ef7fd49c63

  • SHA512

    687460e67d9e875db8a201f881991e7eacb82c86799783a4d3d7cdd684649dbc8a868afe62fbf1fddeb90e72cc33dfe5836ba8b0ee15fe15d8dbdb64c2f758a1

  • SSDEEP

    1536:A8ZSadagxpHbGGpT74d+pM3tdlokqYbriJAJwe3hiefMZck54rQMrXg:RdaO79p74d+y9bqYfiyJwe3hiefMnur/

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      6566e37de9f53f9181ed44365f0d92340923feec9e67a7f5a59bb9ef7fd49c63

    • Size

      85KB

    • MD5

      cbf4bfe048428c75658a97636038d4f2

    • SHA1

      8d9683a259e1b2b353d6d172ce1b3a4f3eef3e98

    • SHA256

      6566e37de9f53f9181ed44365f0d92340923feec9e67a7f5a59bb9ef7fd49c63

    • SHA512

      687460e67d9e875db8a201f881991e7eacb82c86799783a4d3d7cdd684649dbc8a868afe62fbf1fddeb90e72cc33dfe5836ba8b0ee15fe15d8dbdb64c2f758a1

    • SSDEEP

      1536:A8ZSadagxpHbGGpT74d+pM3tdlokqYbriJAJwe3hiefMZck54rQMrXg:RdaO79p74d+y9bqYfiyJwe3hiefMnur/

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks