Overview

overview

8

Static

static

8

115dbdee90...34.exe

windows7-x64

8

115dbdee90...34.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    115dbdee907e2bd31a313b51e9cb0e161bc593f7e73ceafbfad00d3bb9c16d34

  • Size

    1.8MB

  • Sample

    221127-r4f4csee48

  • MD5

    f72c3f26268cd1934403d4d9cab9c1cf

  • SHA1

    ca7004eae6b055d8097365cbfb92f8cc4c5a1711

  • SHA256

    115dbdee907e2bd31a313b51e9cb0e161bc593f7e73ceafbfad00d3bb9c16d34

  • SHA512

    1398c1c250f95b1b1f6c4046d1b3474521492b31c19b7839fc405c6ada5fc21056aefc4b5fec8639e29614603dfd8132c24ba5f00c7eb6c9d159208caafeb0e2

  • SSDEEP

    49152:q1O9fBH8qYxJQPye1mXlcT5sPt0yB0R5x0:q8fBH8FxJZXw5StJB0p

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      115dbdee907e2bd31a313b51e9cb0e161bc593f7e73ceafbfad00d3bb9c16d34

    • Size

      1.8MB

    • MD5

      f72c3f26268cd1934403d4d9cab9c1cf

    • SHA1

      ca7004eae6b055d8097365cbfb92f8cc4c5a1711

    • SHA256

      115dbdee907e2bd31a313b51e9cb0e161bc593f7e73ceafbfad00d3bb9c16d34

    • SHA512

      1398c1c250f95b1b1f6c4046d1b3474521492b31c19b7839fc405c6ada5fc21056aefc4b5fec8639e29614603dfd8132c24ba5f00c7eb6c9d159208caafeb0e2

    • SSDEEP

      49152:q1O9fBH8qYxJQPye1mXlcT5sPt0yB0R5x0:q8fBH8FxJZXw5StJB0p

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks