Overview

overview

8

Static

static

8

�...mp.exe

windows7-x64

8

�...mp.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0d8f653ac2c067c0f9a2a188d8690c361159b599a10863664b0a8595134688a

  • Size

    1.5MB

  • Sample

    221126-3q3kzsha61

  • MD5

    d28b132f688d3f67ffde7ab240678109

  • SHA1

    e9df75a0cfc34ba72f3e3724cbeacf1d42b6f53b

  • SHA256

    b0d8f653ac2c067c0f9a2a188d8690c361159b599a10863664b0a8595134688a

  • SHA512

    a19c4de0c2e679490e3f1c7b55f7d7ed8ea1f059b6894f4dff7cd70b0cd7d39a0994e8927d6da32bcf7fed507656d586a96c61d30f5f0df73ac19e03e09e9a68

  • SSDEEP

    24576:fd7j+iXR2Y5gdeS2xs3ReOzVocCEB+SbqJC+XdbrrUnyLjevDqYcu8t7:fph2Ym+qhvzVxz+m8dfrRLqb1+t7

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      Ρս1.5.vmp.exe

    • Size

      1.5MB

    • MD5

      42cafa1ad78f88a6436628a351d94462

    • SHA1

      575d2b6f04c8eb0887d21f7d5964d4aa24bda869

    • SHA256

      abeeeeb585427ef539dbf436ddce39a3310d5f0baec87078a67c401cde44e9de

    • SHA512

      f129d6981eceba8e04c541ac739fe182e3de3db65f56a98bab6f90e2378077e806872ae67bcf8a85d10541bd0f32bda0b22c6885a1502b0ccdc879b05f69fb9d

    • SSDEEP

      49152:AX8XK7vXz/IQUTfOz/HR3zx5HzKjc8Qt1gJOSeM5jGeK:c6+vj7M+ZV598zJOL2

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks