Overview

overview

8

Static

static

8

525abcd424...9f.exe

windows7-x64

8

525abcd424...9f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    525abcd4247b2ba32eb57cd2080cf39dfa17ae5ed83a4b54a1b5e052c3c8aa9f

  • Size

    3.6MB

  • Sample

    221127-fata2sea2x

  • MD5

    12528f6900a6a7b1079b148d6987248c

  • SHA1

    f527de57eb87f9ef0e37c23abddf1907b7e50715

  • SHA256

    525abcd4247b2ba32eb57cd2080cf39dfa17ae5ed83a4b54a1b5e052c3c8aa9f

  • SHA512

    8bceb41b49c116f8fba327a37a41ae3b31eadcbd165d3417f683473ac61f36cd00477d6aa2dbcfdc780fd4181448aa87cf7c0e8a1f676ca9a1843b10fd1c6390

  • SSDEEP

    98304:iih6F7MZrHRsgdDBtbd0QZ06nTKQUJlmP0PZLDTEZhmu76H+muF:l6FcrTBtb2KT1UPgUTEyu76H+9

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      525abcd4247b2ba32eb57cd2080cf39dfa17ae5ed83a4b54a1b5e052c3c8aa9f

    • Size

      3.6MB

    • MD5

      12528f6900a6a7b1079b148d6987248c

    • SHA1

      f527de57eb87f9ef0e37c23abddf1907b7e50715

    • SHA256

      525abcd4247b2ba32eb57cd2080cf39dfa17ae5ed83a4b54a1b5e052c3c8aa9f

    • SHA512

      8bceb41b49c116f8fba327a37a41ae3b31eadcbd165d3417f683473ac61f36cd00477d6aa2dbcfdc780fd4181448aa87cf7c0e8a1f676ca9a1843b10fd1c6390

    • SSDEEP

      98304:iih6F7MZrHRsgdDBtbd0QZ06nTKQUJlmP0PZLDTEZhmu76H+muF:l6FcrTBtb2KT1UPgUTEyu76H+9

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks