Overview

overview

8

Static

static

8

4e4a5e7fd9...e8.exe

windows7-x64

8

4e4a5e7fd9...e8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e4a5e7fd967433948dfd22ddef9f3679a14e0f911ec84471f3f9af5aa5413e8

  • Size

    2.3MB

  • Sample

    221125-ny59hsef44

  • MD5

    da5ed3c7ce236d765b62ecb9ef043665

  • SHA1

    9348019e1fd3494594b1183913d77f7e26e74c66

  • SHA256

    4e4a5e7fd967433948dfd22ddef9f3679a14e0f911ec84471f3f9af5aa5413e8

  • SHA512

    072b41c5f463315455922c895ab463457cd54706f9639f078e0e39c5dc082ae85a8c46bfcb7013200476e4fb385a72b13e1379779007bc61da1a9aab2c96719b

  • SSDEEP

    49152:RiMqIWd6eB1rMFPcytv3myhW0jl/IkzGKsYZ7OZ+Kagd:sMvw6asPLN3mIW0hgkzG4jg

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      4e4a5e7fd967433948dfd22ddef9f3679a14e0f911ec84471f3f9af5aa5413e8

    • Size

      2.3MB

    • MD5

      da5ed3c7ce236d765b62ecb9ef043665

    • SHA1

      9348019e1fd3494594b1183913d77f7e26e74c66

    • SHA256

      4e4a5e7fd967433948dfd22ddef9f3679a14e0f911ec84471f3f9af5aa5413e8

    • SHA512

      072b41c5f463315455922c895ab463457cd54706f9639f078e0e39c5dc082ae85a8c46bfcb7013200476e4fb385a72b13e1379779007bc61da1a9aab2c96719b

    • SSDEEP

      49152:RiMqIWd6eB1rMFPcytv3myhW0jl/IkzGKsYZ7OZ+Kagd:sMvw6asPLN3mIW0hgkzG4jg

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks