Overview

overview

8

Static

static

8

ee4b352de5...10.exe

windows7-x64

8

ee4b352de5...10.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee4b352de5e7990ddaed1142f9b9e8b7132c36546f5c14c6583bd5412e1c1410

  • Size

    1.4MB

  • Sample

    221125-pkltdsgb89

  • MD5

    a30b7105011aeacbb3c25b593e5f2561

  • SHA1

    d8f8a8adbaaf3d9fabc9493610fe7cb642a32ab9

  • SHA256

    ee4b352de5e7990ddaed1142f9b9e8b7132c36546f5c14c6583bd5412e1c1410

  • SHA512

    8ab29413e830a2404ab4df2d0d3f86b7ff602ad6dfb4e49fb3862e303076c14d47ce3db570eafb8c0872bacd3f4334a7323ee3a6db7c0d37b76799c0710d89fb

  • SSDEEP

    24576:oGVOffwKGzJBMmWc0Kwb0s3r0q3QNuG3zoa0Jq/07mOeVZqLqUoLvNop2zbbiEkP:BVS4KGl73fs7MuG3zpEqM7iKeUelgabt

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      ee4b352de5e7990ddaed1142f9b9e8b7132c36546f5c14c6583bd5412e1c1410

    • Size

      1.4MB

    • MD5

      a30b7105011aeacbb3c25b593e5f2561

    • SHA1

      d8f8a8adbaaf3d9fabc9493610fe7cb642a32ab9

    • SHA256

      ee4b352de5e7990ddaed1142f9b9e8b7132c36546f5c14c6583bd5412e1c1410

    • SHA512

      8ab29413e830a2404ab4df2d0d3f86b7ff602ad6dfb4e49fb3862e303076c14d47ce3db570eafb8c0872bacd3f4334a7323ee3a6db7c0d37b76799c0710d89fb

    • SSDEEP

      24576:oGVOffwKGzJBMmWc0Kwb0s3r0q3QNuG3zoa0Jq/07mOeVZqLqUoLvNop2zbbiEkP:BVS4KGl73fs7MuG3zpEqM7iKeUelgabt

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks