Overview

overview

8

Static

static

8

d5ecbd2a29...30.exe

windows7-x64

8

d5ecbd2a29...30.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5ecbd2a293cf3ccc295f901b543c5951cfb9de19eff4e1e474effe702dda130

  • Size

    960KB

  • Sample

    221125-ybat7sde4w

  • MD5

    aeb2334377ab2052e62053e306fcd6bc

  • SHA1

    aadcab341f06c9ac060a7594ce7105542d229ce0

  • SHA256

    d5ecbd2a293cf3ccc295f901b543c5951cfb9de19eff4e1e474effe702dda130

  • SHA512

    d860869c339ae73cd67b9c7ddd6be7ad9e4a71dd7641dd75896cb1d166d912f6122994ce96181a2e910a66c36e726d294283d3dbbcd49abc40fcd77590fc936d

  • SSDEEP

    24576:EbfyvfThf7vYQbjdD+yFVZxA7EwONaNGsbXQK:Ebfyjhj91h+7VOaNF

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      d5ecbd2a293cf3ccc295f901b543c5951cfb9de19eff4e1e474effe702dda130

    • Size

      960KB

    • MD5

      aeb2334377ab2052e62053e306fcd6bc

    • SHA1

      aadcab341f06c9ac060a7594ce7105542d229ce0

    • SHA256

      d5ecbd2a293cf3ccc295f901b543c5951cfb9de19eff4e1e474effe702dda130

    • SHA512

      d860869c339ae73cd67b9c7ddd6be7ad9e4a71dd7641dd75896cb1d166d912f6122994ce96181a2e910a66c36e726d294283d3dbbcd49abc40fcd77590fc936d

    • SSDEEP

      24576:EbfyvfThf7vYQbjdD+yFVZxA7EwONaNGsbXQK:Ebfyjhj91h+7VOaNF

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks