Overview

overview

8

Static

static

8

Dick CF Ve...mp.exe

windows7-x64

8

Dick CF Ve...mp.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e926913714822f2a633dda288d5cc6478bfca9081dc2816f0bb4a2eb6197c9b2

  • Size

    2.7MB

  • Sample

    221126-f1f4eahc8v

  • MD5

    61e62903dff37aff6cbbf58ca44b4b53

  • SHA1

    53e0e80d88548e92dc3373b0a9a546291b140eff

  • SHA256

    e926913714822f2a633dda288d5cc6478bfca9081dc2816f0bb4a2eb6197c9b2

  • SHA512

    dab697e14bd2d7715b78ff1e02d13fc7b3f57e9376dbffff3166691ba70911d2551e8902d1b7dba86e1e1be67fe9f10f55d65c4d91f53f75de604a4555696d56

  • SSDEEP

    49152:q7hmZ56PMK88RlT++hroCUSus204rjJe5tlspEihHD/rro6aCucoc6XmXRjO:GhB0K7RlT++hM8X+HElspEigC/No

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      Dick CF Ver2.0-SP27.vmp.exe

    • Size

      2.7MB

    • MD5

      13b5cd66d84c5e70e37a803cc99eac51

    • SHA1

      d13ea4e72e5d20792f0814db0833c64a0b5abd26

    • SHA256

      5a111e2467a9bd803880ecac699ec34fc491e9d504749e03a5531f610bf8d5d9

    • SHA512

      be70e76a0d60a5f63eea8b09bbb18f40ac0285c79624f64c549bf1040a87b1002affa1f7f74e312ef0783d03a8c77d33c19b0971491c614226dd4ec106b03664

    • SSDEEP

      49152:l0nbO4VVbuxBjwr6S9saNSj7BmBG+No74cpSMm7dQDDAkh+BDUlY9BlmF8:mbOeVbCBW9sSSpcRNinpSMm52DVhIDUY

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks