Overview

overview

8

Static

static

8

c6407afc57...2d.exe

windows7-x64

8

c6407afc57...2d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6407afc5732ed56d0669dc0d944e56a8dd9e322d2cdc226616b77ac02c1892d

  • Size

    1.4MB

  • Sample

    221127-yspppaad6v

  • MD5

    1f93d007fc111efc021fa0b6a0b2c2de

  • SHA1

    1d048ee47a40a2aff6f86ecc9feae4fe719e4a4d

  • SHA256

    c6407afc5732ed56d0669dc0d944e56a8dd9e322d2cdc226616b77ac02c1892d

  • SHA512

    cb0b02edf6507ab1e535097af290f583c9c8313937992d2126ed9fbde002a912014c7d12ad40981ce73e152751a9c0cb4aaf57b23c550e727ba106cb1323a755

  • SSDEEP

    24576:tk70TrcDgjCXYNBsIfkUpEONJ5XBKcHE6grYO5/kxlAs+jlFFmqgCVJUBUrG:tkQTAjIYMxNH5s5MB+j0oid

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      c6407afc5732ed56d0669dc0d944e56a8dd9e322d2cdc226616b77ac02c1892d

    • Size

      1.4MB

    • MD5

      1f93d007fc111efc021fa0b6a0b2c2de

    • SHA1

      1d048ee47a40a2aff6f86ecc9feae4fe719e4a4d

    • SHA256

      c6407afc5732ed56d0669dc0d944e56a8dd9e322d2cdc226616b77ac02c1892d

    • SHA512

      cb0b02edf6507ab1e535097af290f583c9c8313937992d2126ed9fbde002a912014c7d12ad40981ce73e152751a9c0cb4aaf57b23c550e727ba106cb1323a755

    • SSDEEP

      24576:tk70TrcDgjCXYNBsIfkUpEONJ5XBKcHE6grYO5/kxlAs+jlFFmqgCVJUBUrG:tkQTAjIYMxNH5s5MB+j0oid

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks