Overview

overview

8

Static

static

8

Wall Hack.dll

windows7-x64

8

Wall Hack.dll

windows10-2004-x64

8

x1nject.exe

windows7-x64

8

x1nject.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d494e9b4970d2d6792a117d6cc908d8424fe1e69c21a8075465ba431faa9c651

  • Size

    390KB

  • Sample

    221127-my1tcsbe79

  • MD5

    5b8c759726cc3c38a404d10feba06279

  • SHA1

    9f0623c0b7f72cb2b84191b36bce97aa1bff8d7b

  • SHA256

    d494e9b4970d2d6792a117d6cc908d8424fe1e69c21a8075465ba431faa9c651

  • SHA512

    cb3c06be09c18a784a155a9bf7dd7cb61ef2f23afce4babb6162d64263ad308251a6b0fbe32f2fc80563e3edde51b60bf8293f9d02380922833bf00371426f5d

  • SSDEEP

    6144:hDzLh0/PG5fKZjGoUY8PMDF1XAIVhhvge+pNDsxVEuPTc827IymUWbGmEDsEdcPb:h0PG5f1YEcXPhj2Qi3mELdq

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      Wall Hack.dll

    • Size

      197KB

    • MD5

      bee0a0d87f00d2b4e8125aafa5c35b05

    • SHA1

      37527f723c138d4500e30e4a5c34ddecf50c5c34

    • SHA256

      0a5e783e5bb7b812351eb372e324f2f33b5a6f943da0fee718af816e37ce8150

    • SHA512

      b93b40476b79783e95aac3eb2d18b0e8ca6087547235b76056030d5affb707739f3a712ace26ca6a63e96a8ee4383ad2ee70b4ec3fb04d1c8b4298efbac8a69a

    • SSDEEP

      3072:0gSzAsSZES2L8EH89KZGaUalyAJqO9rIm1EVPk6VXF2N1FFQirgPOlS5ss:0g7TES2XcAZQk6O9rIm1d6VFWs/5s

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      x1nject.exe

    • Size

      262KB

    • MD5

      e974a7ed7fa0c096aa1f59ae6d8cce72

    • SHA1

      24b215e712fa745ac94d033ee7c5a556a5df0dab

    • SHA256

      d042a6add7b1547e5165d0c0c0f0eb21ee778b44c27e0a2bbce9f02b79156c0b

    • SHA512

      156cfa7b252d8737a4d3fdc3f8095353051d7f15e1293d6c1213de36ea44d526fd94e75765b3a1f75ed83f9b02dd4329b9eab466e9188fea107e622d0c1d6ba4

    • SSDEEP

      6144:jYPOodm30xwcP9n2U82xZkckexoS8pm97WQP:Ydm3xc4L24cVoS8c97Wy

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks