Overview

overview

8

Static

static

8

镇魂勇�...��.exe

windows7-x64

8

镇魂勇�...��.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b9dd537d7ec7ca64f866b4467c8f5bbf75938fea19047144f111dfddbb53a66

  • Size

    4.2MB

  • Sample

    221127-ecb9wabf7x

  • MD5

    a1eb5c19addcdb44ed88f4cd7ce9c547

  • SHA1

    e70a4a83df0b36d3a5e7d6b64a8a37cd5e26de92

  • SHA256

    4b9dd537d7ec7ca64f866b4467c8f5bbf75938fea19047144f111dfddbb53a66

  • SHA512

    24f24143c45bc9d51dc95e64e6166e4ab73aba7b05f3e5e5f15253a40d82471015e1dcd33d1960cd3754ff2e4d303fb8fc0c7bd1782f75f47167305e5f1ea1a8

  • SSDEEP

    98304:sOttY/gBBQ2uGvu4Al8NnBE3BGeHLmY398/PsVs1ooLp463f8m:sOP8go2upDAK3MVa9lVsooLS6v/

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      镇魂勇士的信仰辅助二代V1 0/镇魂勇士的信仰辅助V1.6版本最新版.exe

    • Size

      4.3MB

    • MD5

      d7e71e867ec10ae2e7c6998ab59dc2f6

    • SHA1

      53ed40bb480eff2f003ec01b4852cb8beb70b569

    • SHA256

      1ca766cf11ebf742845e34d433b93bdd82b2e6c14ae2cf4ce43a4db3ff284c06

    • SHA512

      47ff798782e758bad126aa1c757e31e8706d9adfe756bb261addb0dad1e828a17db319aaf11e619659802a6ac0ea6e914a7eb4032480f666af69b3cd0be980fb

    • SSDEEP

      98304:1XPTAMPmUq0V0Rv5sq+AoWxHnjYL0OjyhZLIvRuvRiy:1fD+/w0Rhs4zYQOuzIvRuvRf

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks