Overview

overview

8

Static

static

8

injector.exe

windows7-x64

8

injector.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    injector.exe

  • Size

    985KB

  • Sample

    221127-ljdjvafe87

  • MD5

    e5ad89e0cce625fde0ddec73721e1459

  • SHA1

    42dbcc7f946bc373313cae17e9d940d916d24638

  • SHA256

    8e0428963b01a1588da55251c97762e89e723105119df57f4d25480395eefb8e

  • SHA512

    71afe5ad4bcb4099bcfd5b4944d8426887abbdee9f4d7e9946f5a50c70de7904bd781cc0d6a80d41d087a17235ba6160f835adea49930337df55281c137202b3

  • SSDEEP

    24576:b5TUg+vOIcVZmtfA/yq+oPMIdvtkYGciFag:btg04fTqNP3vSFfs

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      injector.exe

    • Size

      985KB

    • MD5

      e5ad89e0cce625fde0ddec73721e1459

    • SHA1

      42dbcc7f946bc373313cae17e9d940d916d24638

    • SHA256

      8e0428963b01a1588da55251c97762e89e723105119df57f4d25480395eefb8e

    • SHA512

      71afe5ad4bcb4099bcfd5b4944d8426887abbdee9f4d7e9946f5a50c70de7904bd781cc0d6a80d41d087a17235ba6160f835adea49930337df55281c137202b3

    • SSDEEP

      24576:b5TUg+vOIcVZmtfA/yq+oPMIdvtkYGciFag:btg04fTqNP3vSFfs

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks