Overview

overview

8

Static

static

eb82aaf9a1...4e.exe

windows7-x64

8

eb82aaf9a1...4e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb82aaf9a1d2832300b7739a1c3ae0ffec90f6c03a0b959e6a79735e4eeefb4e

  • Size

    3.2MB

  • Sample

    221127-1ajrtsad27

  • MD5

    2acc4cff63991eea9db86c537732dbd6

  • SHA1

    81008190bcbbcea323a1ce980f7570822b4346f3

  • SHA256

    eb82aaf9a1d2832300b7739a1c3ae0ffec90f6c03a0b959e6a79735e4eeefb4e

  • SHA512

    86300599a1426d28e2115ff0cf90f79eb80360d34ec3fdd2b47774515e592290b7904ff780a1a3fd2677ba6ccc08ea7914c97caee99a824f62cca34791b8786b

  • SSDEEP

    98304:S45RG0KmFIAG248jUB10g5gxwdg762/lS:LCO48A1x5eph/lS

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      eb82aaf9a1d2832300b7739a1c3ae0ffec90f6c03a0b959e6a79735e4eeefb4e

    • Size

      3.2MB

    • MD5

      2acc4cff63991eea9db86c537732dbd6

    • SHA1

      81008190bcbbcea323a1ce980f7570822b4346f3

    • SHA256

      eb82aaf9a1d2832300b7739a1c3ae0ffec90f6c03a0b959e6a79735e4eeefb4e

    • SHA512

      86300599a1426d28e2115ff0cf90f79eb80360d34ec3fdd2b47774515e592290b7904ff780a1a3fd2677ba6ccc08ea7914c97caee99a824f62cca34791b8786b

    • SSDEEP

      98304:S45RG0KmFIAG248jUB10g5gxwdg762/lS:LCO48A1x5eph/lS

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks