Overview

overview

8

Static

static

8

cec7b8ae73...13.exe

windows7-x64

8

cec7b8ae73...13.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cec7b8ae73c56e1f63e723e4fd5db538dd43e499898f69c109b525f8b3c38a13

  • Size

    2.1MB

  • Sample

    221125-pmr37abe7x

  • MD5

    0841ce612dd83501de5d32a3edf5b19a

  • SHA1

    e8c3fbf1de0f20adf3ada293363097596715b0e5

  • SHA256

    cec7b8ae73c56e1f63e723e4fd5db538dd43e499898f69c109b525f8b3c38a13

  • SHA512

    c6002bfedef742e50fe5adb859246154f7139b58aaa5a68bb0c584ac59a049e81b7244b49b53eb7c821ac790e37264e1a580730c3a81267cdb5ff8e33baa87cf

  • SSDEEP

    49152:aIBcCW6URjnWyLb5PFhv+EqvcVYATiO0rg7WpmmP:5cCW6qHtFhv+jEYii1Dm+

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      cec7b8ae73c56e1f63e723e4fd5db538dd43e499898f69c109b525f8b3c38a13

    • Size

      2.1MB

    • MD5

      0841ce612dd83501de5d32a3edf5b19a

    • SHA1

      e8c3fbf1de0f20adf3ada293363097596715b0e5

    • SHA256

      cec7b8ae73c56e1f63e723e4fd5db538dd43e499898f69c109b525f8b3c38a13

    • SHA512

      c6002bfedef742e50fe5adb859246154f7139b58aaa5a68bb0c584ac59a049e81b7244b49b53eb7c821ac790e37264e1a580730c3a81267cdb5ff8e33baa87cf

    • SSDEEP

      49152:aIBcCW6URjnWyLb5PFhv+EqvcVYATiO0rg7WpmmP:5cCW6qHtFhv+jEYii1Dm+

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks