Overview

overview

8

Static

static

8

0a5e783e5b...50.dll

windows7-x64

8

0a5e783e5b...50.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a5e783e5bb7b812351eb372e324f2f33b5a6f943da0fee718af816e37ce8150

  • Size

    197KB

  • Sample

    221127-myzlasbe76

  • MD5

    bee0a0d87f00d2b4e8125aafa5c35b05

  • SHA1

    37527f723c138d4500e30e4a5c34ddecf50c5c34

  • SHA256

    0a5e783e5bb7b812351eb372e324f2f33b5a6f943da0fee718af816e37ce8150

  • SHA512

    b93b40476b79783e95aac3eb2d18b0e8ca6087547235b76056030d5affb707739f3a712ace26ca6a63e96a8ee4383ad2ee70b4ec3fb04d1c8b4298efbac8a69a

  • SSDEEP

    3072:0gSzAsSZES2L8EH89KZGaUalyAJqO9rIm1EVPk6VXF2N1FFQirgPOlS5ss:0g7TES2XcAZQk6O9rIm1d6VFWs/5s

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      0a5e783e5bb7b812351eb372e324f2f33b5a6f943da0fee718af816e37ce8150

    • Size

      197KB

    • MD5

      bee0a0d87f00d2b4e8125aafa5c35b05

    • SHA1

      37527f723c138d4500e30e4a5c34ddecf50c5c34

    • SHA256

      0a5e783e5bb7b812351eb372e324f2f33b5a6f943da0fee718af816e37ce8150

    • SHA512

      b93b40476b79783e95aac3eb2d18b0e8ca6087547235b76056030d5affb707739f3a712ace26ca6a63e96a8ee4383ad2ee70b4ec3fb04d1c8b4298efbac8a69a

    • SSDEEP

      3072:0gSzAsSZES2L8EH89KZGaUalyAJqO9rIm1EVPk6VXF2N1FFQirgPOlS5ss:0g7TES2XcAZQk6O9rIm1d6VFWs/5s

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks