Overview

overview

8

Static

static

8

316a0cb2ef...90.exe

windows7-x64

8

316a0cb2ef...90.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    316a0cb2effdbfef9011c7bd9b705d3e1b0bc5bffa3c96523ea2091404dde490

  • Size

    1.7MB

  • Sample

    221127-fn72cseh6x

  • MD5

    17109008c1e8ac39762025d04f0e861c

  • SHA1

    5af543b835451a29d05906dfdf7c76b57f47f026

  • SHA256

    316a0cb2effdbfef9011c7bd9b705d3e1b0bc5bffa3c96523ea2091404dde490

  • SHA512

    5342c85a1f06450f788f1d6f575ed0f40f032b16844b64d7d9e3285409ea652926ebc3a478675f7c0bef4be580593a187126f25f0909d5efc5c4c8972eb1aa8f

  • SSDEEP

    49152:k8PIdLAZ3MenOw+1U8XetdtJriw/9kLqoHl:hId+8YG1V0tJriuCZl

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      316a0cb2effdbfef9011c7bd9b705d3e1b0bc5bffa3c96523ea2091404dde490

    • Size

      1.7MB

    • MD5

      17109008c1e8ac39762025d04f0e861c

    • SHA1

      5af543b835451a29d05906dfdf7c76b57f47f026

    • SHA256

      316a0cb2effdbfef9011c7bd9b705d3e1b0bc5bffa3c96523ea2091404dde490

    • SHA512

      5342c85a1f06450f788f1d6f575ed0f40f032b16844b64d7d9e3285409ea652926ebc3a478675f7c0bef4be580593a187126f25f0909d5efc5c4c8972eb1aa8f

    • SSDEEP

      49152:k8PIdLAZ3MenOw+1U8XetdtJriw/9kLqoHl:hId+8YG1V0tJriuCZl

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks