Overview

overview

8

Static

static

5

540aab246a...c4.exe

windows7-x64

8

540aab246a...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    540aab246a5815d4ed533722b23fa1f69077f23eeaea122896c2f29c220164c4

  • Size

    2.4MB

  • Sample

    221126-edndjaab96

  • MD5

    ca30450486a3074881dd3847ae39048c

  • SHA1

    db7e12aa440b58371b4103f0ef3d6c1ffa136732

  • SHA256

    540aab246a5815d4ed533722b23fa1f69077f23eeaea122896c2f29c220164c4

  • SHA512

    1f9a28f2e7215702d0a5cb64080a48c1067158afcef8cbb29cfd3c8ebe51df9c30ea402ffb6fb7bcd4013277f02364804143931e3af7b737af207e935f3cc552

  • SSDEEP

    49152:OZzO43KtaISugRed1bVkaTMG1DFf3opuH6LIQntMre/DB2M:jtaDyhf3oHLI2tMi/DB2

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      540aab246a5815d4ed533722b23fa1f69077f23eeaea122896c2f29c220164c4

    • Size

      2.4MB

    • MD5

      ca30450486a3074881dd3847ae39048c

    • SHA1

      db7e12aa440b58371b4103f0ef3d6c1ffa136732

    • SHA256

      540aab246a5815d4ed533722b23fa1f69077f23eeaea122896c2f29c220164c4

    • SHA512

      1f9a28f2e7215702d0a5cb64080a48c1067158afcef8cbb29cfd3c8ebe51df9c30ea402ffb6fb7bcd4013277f02364804143931e3af7b737af207e935f3cc552

    • SSDEEP

      49152:OZzO43KtaISugRed1bVkaTMG1DFf3opuH6LIQntMre/DB2M:jtaDyhf3oHLI2tMi/DB2

    Score
    8/10
    vmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks