Overview

overview

8

Static

static

8

8fe0b30a7a...84.dll

windows7-x64

8

8fe0b30a7a...84.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fe0b30a7ab90eb3910980cfbdbb5be0834fc3dbcb2de865a90272b5b5d45784

  • Size

    2.4MB

  • Sample

    221125-pxrv6shb33

  • MD5

    ecab701beda846496fb0edadcf7ebb8a

  • SHA1

    84823b97f3d4bbdd9695435ca8be0fccd8b713ea

  • SHA256

    8fe0b30a7ab90eb3910980cfbdbb5be0834fc3dbcb2de865a90272b5b5d45784

  • SHA512

    57d8dc26da3458b21de770192ec3363e6b7feed1bbf236328e83d3ac294ce30d409a4dbb934c48d84a5964b634228feafda2f5c6f5fe32924cc2cfcc2d3cd95a

  • SSDEEP

    49152:tSm9o3PvO5awh79F+Ka4gvWl9tfVdIcerpOiP7yYX30rty4x6jjtRB6biNUaYABE:tB9oHjw7Fe4gvWl9tfTIceNPP+YXnI6a

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      8fe0b30a7ab90eb3910980cfbdbb5be0834fc3dbcb2de865a90272b5b5d45784

    • Size

      2.4MB

    • MD5

      ecab701beda846496fb0edadcf7ebb8a

    • SHA1

      84823b97f3d4bbdd9695435ca8be0fccd8b713ea

    • SHA256

      8fe0b30a7ab90eb3910980cfbdbb5be0834fc3dbcb2de865a90272b5b5d45784

    • SHA512

      57d8dc26da3458b21de770192ec3363e6b7feed1bbf236328e83d3ac294ce30d409a4dbb934c48d84a5964b634228feafda2f5c6f5fe32924cc2cfcc2d3cd95a

    • SSDEEP

      49152:tSm9o3PvO5awh79F+Ka4gvWl9tfVdIcerpOiP7yYX30rty4x6jjtRB6biNUaYABE:tB9oHjw7Fe4gvWl9tfTIceNPP+YXnI6a

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks