Overview

overview

9

Static

static

4536efcc93...c6.exe

windows7-x64

9

4536efcc93...c6.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4536efcc9382cd4498470c36f16267882d4173e58dfa4cfee880e198e7d8d8c6

  • Size

    3.8MB

  • Sample

    221126-hxlwlaba66

  • MD5

    57c10b764a04c7becd89b8159f5fa88a

  • SHA1

    84cfd16944399f66550ab8f7e958146903e455ef

  • SHA256

    4536efcc9382cd4498470c36f16267882d4173e58dfa4cfee880e198e7d8d8c6

  • SHA512

    abee86b8b4d83bbbaa953caba2f8bd556ba4c41748079623cd4933c9662589d62244b80872234c04b4e6745b4bb77a0e9638fbc001eeaee0341050ed82ff1915

  • SSDEEP

    98304:eBVZB/g2p6FYskEhipqdwkLQHHhsSYt8d7+94qoa+N0:Q36+skCfsKSOo+93H

Score
9/10
evasionupxvmprotect

Malware Config

Targets

    • Target

      4536efcc9382cd4498470c36f16267882d4173e58dfa4cfee880e198e7d8d8c6

    • Size

      3.8MB

    • MD5

      57c10b764a04c7becd89b8159f5fa88a

    • SHA1

      84cfd16944399f66550ab8f7e958146903e455ef

    • SHA256

      4536efcc9382cd4498470c36f16267882d4173e58dfa4cfee880e198e7d8d8c6

    • SHA512

      abee86b8b4d83bbbaa953caba2f8bd556ba4c41748079623cd4933c9662589d62244b80872234c04b4e6745b4bb77a0e9638fbc001eeaee0341050ed82ff1915

    • SSDEEP

      98304:eBVZB/g2p6FYskEhipqdwkLQHHhsSYt8d7+94qoa+N0:Q36+skCfsKSOo+93H

    Score
    9/10
    evasionupxvmprotect

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Disables RegEdit via registry modification

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks