Overview

overview

8

Static

static

8

002c839bbd...14.exe

windows7-x64

8

002c839bbd...14.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    002c839bbd1aac288559ba28e59d9f6d1fc8e2a93f72383e13b7f9f2a47f4214

  • Size

    17.9MB

  • Sample

    221127-w73tradf2z

  • MD5

    559b9d305238419c920edfb123e4be62

  • SHA1

    49182110ad23e65745ccb9687c8f664b6b40d5fa

  • SHA256

    002c839bbd1aac288559ba28e59d9f6d1fc8e2a93f72383e13b7f9f2a47f4214

  • SHA512

    b90cbdf03479be618c980e9eee852c804d5d0dd35696785d122171b02f0b9ba163ee8d6828f746cb349aab9a03e974db3717a5cb20450794ee0311ab43368c12

  • SSDEEP

    393216:0YRQ5UEr2KLc6rM5cbHr8Lkqs5m4LIdgsMn2H6GgVMy5guFqmC06ag151/r/V:w5bLcCXskqD4MdU2HnsgYULzV

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      002c839bbd1aac288559ba28e59d9f6d1fc8e2a93f72383e13b7f9f2a47f4214

    • Size

      17.9MB

    • MD5

      559b9d305238419c920edfb123e4be62

    • SHA1

      49182110ad23e65745ccb9687c8f664b6b40d5fa

    • SHA256

      002c839bbd1aac288559ba28e59d9f6d1fc8e2a93f72383e13b7f9f2a47f4214

    • SHA512

      b90cbdf03479be618c980e9eee852c804d5d0dd35696785d122171b02f0b9ba163ee8d6828f746cb349aab9a03e974db3717a5cb20450794ee0311ab43368c12

    • SSDEEP

      393216:0YRQ5UEr2KLc6rM5cbHr8Lkqs5m4LIdgsMn2H6GgVMy5guFqmC06ag151/r/V:w5bLcCXskqD4MdU2HnsgYULzV

    Score
    8/10
    upxvmprotect

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks