Overview

overview

8

Static

static

8

c131f9b0c5...96.exe

windows7-x64

8

c131f9b0c5...96.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c131f9b0c5c85c454b4dc3ff0bb4ecf0bc99768086ae09cb74e403e599fd8f96

  • Size

    1.1MB

  • Sample

    221127-f87akacg66

  • MD5

    119bbf453482a070cd9b01b7ffffe148

  • SHA1

    df9de659252fa5436acc27e0024dc9b067f47417

  • SHA256

    c131f9b0c5c85c454b4dc3ff0bb4ecf0bc99768086ae09cb74e403e599fd8f96

  • SHA512

    465e0fedd34e65854b9316aad2e0253d2ed4707989271ce0f6967c27260200bf97027108b5590bbd03f627a49082eb4b24e6d8601f0e91e33f459266f0247db6

  • SSDEEP

    24576:/AU+/xrn/+WzFPR02wW/atRJUEjmdCfXZHt6SD/1H7lcY6qpQ7W/m:/d+Zrn/dPoLmAXFt6SD/1H7lb6qp6Km

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      c131f9b0c5c85c454b4dc3ff0bb4ecf0bc99768086ae09cb74e403e599fd8f96

    • Size

      1.1MB

    • MD5

      119bbf453482a070cd9b01b7ffffe148

    • SHA1

      df9de659252fa5436acc27e0024dc9b067f47417

    • SHA256

      c131f9b0c5c85c454b4dc3ff0bb4ecf0bc99768086ae09cb74e403e599fd8f96

    • SHA512

      465e0fedd34e65854b9316aad2e0253d2ed4707989271ce0f6967c27260200bf97027108b5590bbd03f627a49082eb4b24e6d8601f0e91e33f459266f0247db6

    • SSDEEP

      24576:/AU+/xrn/+WzFPR02wW/atRJUEjmdCfXZHt6SD/1H7lcY6qpQ7W/m:/d+Zrn/dPoLmAXFt6SD/1H7lb6qp6Km

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks