Overview

overview

8

Static

static

8

21b7cd9616...11.dll

windows7-x64

8

21b7cd9616...11.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21b7cd961632a727c2adaba0a06b357fa041f23d2b91c549918de2d99fa5c611

  • Size

    1.9MB

  • Sample

    221127-zfxp7sgc38

  • MD5

    923997a13c3aa77f8963853fb42e1e3b

  • SHA1

    0cf8e502cb79b61adc9ba066864d086716772df2

  • SHA256

    21b7cd961632a727c2adaba0a06b357fa041f23d2b91c549918de2d99fa5c611

  • SHA512

    bbba8f8534e1e622e823e3490616d1b949a20acf65841fd09337dd8b9b85c9f2383126eb9bd10c2bb72357f9e086be657c4bef4c58098865a078d52f487fb8e1

  • SSDEEP

    49152:bHUKIdZ3Xv/fi6py/PAfzHZbL09AuoCNEDP4GauEvPn:lIP/vpSqdL0KRYcP4OUn

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      21b7cd961632a727c2adaba0a06b357fa041f23d2b91c549918de2d99fa5c611

    • Size

      1.9MB

    • MD5

      923997a13c3aa77f8963853fb42e1e3b

    • SHA1

      0cf8e502cb79b61adc9ba066864d086716772df2

    • SHA256

      21b7cd961632a727c2adaba0a06b357fa041f23d2b91c549918de2d99fa5c611

    • SHA512

      bbba8f8534e1e622e823e3490616d1b949a20acf65841fd09337dd8b9b85c9f2383126eb9bd10c2bb72357f9e086be657c4bef4c58098865a078d52f487fb8e1

    • SSDEEP

      49152:bHUKIdZ3Xv/fi6py/PAfzHZbL09AuoCNEDP4GauEvPn:lIP/vpSqdL0KRYcP4OUn

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks