General

  • Target

    7bbc2d8e8cc90974c6c8a8cd7e5caaa7690e23c7072d63bb10647a65d9b033f7

  • Size

    1.0MB

  • Sample

    221127-gjqf7aha5x

  • MD5

    570202c2858fb9eb56c67e439d0a8eeb

  • SHA1

    8efbbec41a729035c87a805de27ac9ed9947c2a8

  • SHA256

    7bbc2d8e8cc90974c6c8a8cd7e5caaa7690e23c7072d63bb10647a65d9b033f7

  • SHA512

    c3e0c61224cdcd48c338e2ac2728174d9283db59fe535f2e09d7f2e6b1cca959f4aad533ebaf5a116f425e4b91ac7529bab6baf63f1c9a88c083a245a8e0136d

  • SSDEEP

    24576:XdO02vWjWYZs+FAxcKbrqb3wWDeQQWSiW8z4QYfgdNhZ4DOlE:NO03jWYZF1cqniuYI7wDO+

Score
8/10

Malware Config

Targets

    • Target

      սVip/QQ.url

    • Size

      130B

    • MD5

      d3318908fc1cecc3c45e979f90d4dbef

    • SHA1

      a3c960918c708f95f404a3a13d162204a7754517

    • SHA256

      acc1861e99758771495c5ff2f0bbc63adf377e75c461cae58d5b7f84aeb2e095

    • SHA512

      f045f2d09d125a359431b97c09b5fd83886147f843ccd695a536c85e15b4e4f73c426e94328522f2e31f4b1364b211f5fad5387776c62c09928bef93b7589b12

    Score
    1/10
    • Target

      սVip/սVip.exe

    • Size

      1024KB

    • MD5

      f867fa402b14c66b0edd66f961e21f2a

    • SHA1

      c446fe7cd8a13ca6ef2f3b6dad00968ac65b7085

    • SHA256

      1d2078a9196fb26992aa83f4206c6d8b5671c605844ff2456ebe300815d2b368

    • SHA512

      bcc3f33cc31ac242b092a98487b08f582f1a6074895437a32e3d9c14abc459c3f98158c365d46fa57a99dca1de438cf061f060a2afb0f7dc1bc5b48f26df5144

    • SSDEEP

      24576:bbkdDqRSKA4Nm8oW5hDiGGnBTarwgUly:cdDqSXy3i1nUrI

    Score
    8/10
    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks