Overview

overview

8

Static

static

8

adb70666ff...31.exe

windows7-x64

8

adb70666ff...31.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    adb70666ff3d86c9c8b17ae4df231e96964035c7f4722beaa45ef6b3c2a98931

  • Size

    5.2MB

  • Sample

    221125-nz8e9sef93

  • MD5

    1b14c6cc30c9187a0bcbcc349c624d2f

  • SHA1

    89807c3ec13b0fb2b7ce0914ee577deba9a45174

  • SHA256

    adb70666ff3d86c9c8b17ae4df231e96964035c7f4722beaa45ef6b3c2a98931

  • SHA512

    26d30995216317017fe1e876b30cbfc6ae4b1e7e80c2b9118ebc83bf12d5ea472b42372f5b7ce2f825a937f9ecf08383c5906258321c65e6e5c5922e245e2437

  • SSDEEP

    98304:OBJ5Af74OqTM0yZlCqF4A8uMnnZR5klYqdaMvraB902LVjFFSiDHWpTg:OBJmT4TMZJF4AuRmdE224kkibWRg

Score
8/10
persistencevmprotect

Malware Config

Targets

    • Target

      adb70666ff3d86c9c8b17ae4df231e96964035c7f4722beaa45ef6b3c2a98931

    • Size

      5.2MB

    • MD5

      1b14c6cc30c9187a0bcbcc349c624d2f

    • SHA1

      89807c3ec13b0fb2b7ce0914ee577deba9a45174

    • SHA256

      adb70666ff3d86c9c8b17ae4df231e96964035c7f4722beaa45ef6b3c2a98931

    • SHA512

      26d30995216317017fe1e876b30cbfc6ae4b1e7e80c2b9118ebc83bf12d5ea472b42372f5b7ce2f825a937f9ecf08383c5906258321c65e6e5c5922e245e2437

    • SSDEEP

      98304:OBJ5Af74OqTM0yZlCqF4A8uMnnZR5klYqdaMvraB902LVjFFSiDHWpTg:OBJmT4TMZJF4AuRmdE224kkibWRg

    Score
    8/10
    vmprotectpersistence

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks