Overview

overview

8

Static

static

8

19cb501794...3f.exe

windows7-x64

8

19cb501794...3f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19cb501794421b48ec3cfce4a45de578e1578536c2ed1761bd370a0e13620f3f

  • Size

    2.1MB

  • Sample

    221125-paktcaaf4t

  • MD5

    168666676c98dcbe425111e870716cca

  • SHA1

    b4b355e9caa04a3bd2ab1a787798b11825282210

  • SHA256

    19cb501794421b48ec3cfce4a45de578e1578536c2ed1761bd370a0e13620f3f

  • SHA512

    87c313b8c2c393dce29ca8704a0a6dc40ba0ffe19a7efdd5c27e6550b0fd253960cd8f80d1636195c35153bfba7236d72daf60abcd75307ec5b8dc7241395945

  • SSDEEP

    49152:ST3//rTpefQ2AyoHTfOnTfO3/9//zn9oNk:AbTpg9oHTfyTfuXpik

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      19cb501794421b48ec3cfce4a45de578e1578536c2ed1761bd370a0e13620f3f

    • Size

      2.1MB

    • MD5

      168666676c98dcbe425111e870716cca

    • SHA1

      b4b355e9caa04a3bd2ab1a787798b11825282210

    • SHA256

      19cb501794421b48ec3cfce4a45de578e1578536c2ed1761bd370a0e13620f3f

    • SHA512

      87c313b8c2c393dce29ca8704a0a6dc40ba0ffe19a7efdd5c27e6550b0fd253960cd8f80d1636195c35153bfba7236d72daf60abcd75307ec5b8dc7241395945

    • SSDEEP

      49152:ST3//rTpefQ2AyoHTfOnTfO3/9//zn9oNk:AbTpg9oHTfyTfuXpik

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks