Overview

overview

8

Static

static

8

2a66364b40...1f.dll

windows7-x64

8

2a66364b40...1f.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a66364b40efb9347aafa5628572b767f91d5a25035d7f706ee21b3e223e591f

  • Size

    724KB

  • Sample

    221127-nl46padd36

  • MD5

    5b68341c203d57dbac1362113b06e86d

  • SHA1

    4bdc1ad65e29dda882b51b76ad14f7872ff258e8

  • SHA256

    2a66364b40efb9347aafa5628572b767f91d5a25035d7f706ee21b3e223e591f

  • SHA512

    0c636fe614cac0645181a6da463eda203565f423056984ef2ac6cc09cbbe6f2af63520e8bde9149a98fd0fc1df8c90d4623980aa758c409220bf9f4b9fb7fe63

  • SSDEEP

    12288:Mz13OlgD8IICnF/VyrUpJ4GFhE836fpfr9lU8L2sob8HqwSRS1qs3:0BD8UyrUp+Yt36flr9WJNSn0iqs3

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      2a66364b40efb9347aafa5628572b767f91d5a25035d7f706ee21b3e223e591f

    • Size

      724KB

    • MD5

      5b68341c203d57dbac1362113b06e86d

    • SHA1

      4bdc1ad65e29dda882b51b76ad14f7872ff258e8

    • SHA256

      2a66364b40efb9347aafa5628572b767f91d5a25035d7f706ee21b3e223e591f

    • SHA512

      0c636fe614cac0645181a6da463eda203565f423056984ef2ac6cc09cbbe6f2af63520e8bde9149a98fd0fc1df8c90d4623980aa758c409220bf9f4b9fb7fe63

    • SSDEEP

      12288:Mz13OlgD8IICnF/VyrUpJ4GFhE836fpfr9lU8L2sob8HqwSRS1qs3:0BD8UyrUp+Yt36flr9WJNSn0iqs3

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks