Overview

overview

8

Static

static

数码资源网.url

windows7-x64

1

数码资源网.url

windows10-2004-x64

1

�....3.exe

windows7-x64

8

�....3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    73932e9519c8aa286e71c0da7cb5e41b795208f05ed9b7960020f485f3dc98e4

  • Size

    1.5MB

  • Sample

    221125-w5gthaab4v

  • MD5

    50911ec834977745a7dfefdbcd607b3f

  • SHA1

    5dac614dcf4489c3c8ba3fd9a152231827e24901

  • SHA256

    73932e9519c8aa286e71c0da7cb5e41b795208f05ed9b7960020f485f3dc98e4

  • SHA512

    e824335635c2cbb9461f65071eabab67cd1340a6f6a881ca65109ffff60c8639dbcfe1d19a11793d5c80e651dd071b396eea4f0a6352849ed7b411415ed01ec2

  • SSDEEP

    24576:JFquXdcuhpnpEyv2Dc5hPE4fUXKVmJSi32vTpos6Tg7APrCj:J/dZDvmpsUXQCSimLKRTg7APr6

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      数码资源网.url

    • Size

      244B

    • MD5

      305983ae6219bf10d517e168b3ebe5ea

    • SHA1

      b30177e0d7aa2c46843fa9c728c8a9319f34c6a1

    • SHA256

      a4a66ca6e527f6b5a344ec48235b21666f44d19f710ea5d75332e6a4263d027f

    • SHA512

      def75af02cb32b05d19cea6ac978941f93b659fc23a3d8ea29f60874c6875a08274403c125452bd14fc2e878e193eecca70b83f19c22881e3f9a8ab4f6afcb28

    Score
    1/10
    behavioral1behavioral2

    • Target

      QQɳ̳ǸV2.3.exe

    • Size

      2.1MB

    • MD5

      ca5eec20e4b95edef98d7d4fe597f749

    • SHA1

      663f6ee4079f771007aebae035954d9940137981

    • SHA256

      48f126e6278b49049fe92d9e0f2d59be98c6167e547ae155ebb87afdb18a4821

    • SHA512

      225877f68a30e914980d1e60d9302d0f9f4942a16a70070eb08e7421b33583e2464a049c09f11329cf7bb9b32691952abaa48ae017c858f3aef8a328a258b98a

    • SSDEEP

      49152:AiHbSYUgLJ3nnjpR92uszYHoaR/daNcVh:ogLBnT4qoa+NcV

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks