Overview

overview

8

Static

static

8

1d2078a919...68.exe

windows7-x64

8

1d2078a919...68.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d2078a9196fb26992aa83f4206c6d8b5671c605844ff2456ebe300815d2b368

  • Size

    1024KB

  • Sample

    221127-gjg5taha4t

  • MD5

    f867fa402b14c66b0edd66f961e21f2a

  • SHA1

    c446fe7cd8a13ca6ef2f3b6dad00968ac65b7085

  • SHA256

    1d2078a9196fb26992aa83f4206c6d8b5671c605844ff2456ebe300815d2b368

  • SHA512

    bcc3f33cc31ac242b092a98487b08f582f1a6074895437a32e3d9c14abc459c3f98158c365d46fa57a99dca1de438cf061f060a2afb0f7dc1bc5b48f26df5144

  • SSDEEP

    24576:bbkdDqRSKA4Nm8oW5hDiGGnBTarwgUly:cdDqSXy3i1nUrI

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      1d2078a9196fb26992aa83f4206c6d8b5671c605844ff2456ebe300815d2b368

    • Size

      1024KB

    • MD5

      f867fa402b14c66b0edd66f961e21f2a

    • SHA1

      c446fe7cd8a13ca6ef2f3b6dad00968ac65b7085

    • SHA256

      1d2078a9196fb26992aa83f4206c6d8b5671c605844ff2456ebe300815d2b368

    • SHA512

      bcc3f33cc31ac242b092a98487b08f582f1a6074895437a32e3d9c14abc459c3f98158c365d46fa57a99dca1de438cf061f060a2afb0f7dc1bc5b48f26df5144

    • SSDEEP

      24576:bbkdDqRSKA4Nm8oW5hDiGGnBTarwgUly:cdDqSXy3i1nUrI

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks