Overview

overview

8

Static

static

8

d618d188a2...1a.exe

windows7-x64

8

d618d188a2...1a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d618d188a287fa91384121597c086c23866f3bcda4793059974d0b771550a01a

  • Size

    1.0MB

  • Sample

    221126-xptzkabb5s

  • MD5

    ed51a863e336808d4f67ef59df97f3b9

  • SHA1

    233fed9f10b95e5279c96d5b03b8557ace83ce61

  • SHA256

    d618d188a287fa91384121597c086c23866f3bcda4793059974d0b771550a01a

  • SHA512

    b9c60a0ffdacaa713e545f067512100863972e9d8142a5e4d8e0829c5bc1a45d5e9097e14fe3170e756a5652b7959dfb25a877c4110c2207d2d0e1fecebd0054

  • SSDEEP

    24576:CsaMcNeaoi3QginRuEuAQpxb0o8tBCm9jod:c1Qlu3BC5od

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      d618d188a287fa91384121597c086c23866f3bcda4793059974d0b771550a01a

    • Size

      1.0MB

    • MD5

      ed51a863e336808d4f67ef59df97f3b9

    • SHA1

      233fed9f10b95e5279c96d5b03b8557ace83ce61

    • SHA256

      d618d188a287fa91384121597c086c23866f3bcda4793059974d0b771550a01a

    • SHA512

      b9c60a0ffdacaa713e545f067512100863972e9d8142a5e4d8e0829c5bc1a45d5e9097e14fe3170e756a5652b7959dfb25a877c4110c2207d2d0e1fecebd0054

    • SSDEEP

      24576:CsaMcNeaoi3QginRuEuAQpxb0o8tBCm9jod:c1Qlu3BC5od

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks