Overview

overview

8

Static

static

1bda31487a...9b.exe

windows7-x64

8

1bda31487a...9b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bda31487ac5e04d007f0e2268a19544de8ede84df20008be1185c0034b1119b

  • Size

    4.1MB

  • Sample

    221129-1bxebahe85

  • MD5

    c554f5bc12ea046ad9722ff24ce5bb0f

  • SHA1

    e729d5931f379aab9c9949732ddb43107270899a

  • SHA256

    1bda31487ac5e04d007f0e2268a19544de8ede84df20008be1185c0034b1119b

  • SHA512

    6398d6a4ea0d94772097a12fe6de12d23b49453c2b1285d4342be4f4b7b39bef8df3132e65b20f73159bc67880ceccde2f98ba700ebd40d13dc68610e9429e11

  • SSDEEP

    98304:sZUg5LFvJOTI6UPap4L9NpOlnlwtHTKrvATuE:25SInk4L9jglwtz2ATuE

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      1bda31487ac5e04d007f0e2268a19544de8ede84df20008be1185c0034b1119b

    • Size

      4.1MB

    • MD5

      c554f5bc12ea046ad9722ff24ce5bb0f

    • SHA1

      e729d5931f379aab9c9949732ddb43107270899a

    • SHA256

      1bda31487ac5e04d007f0e2268a19544de8ede84df20008be1185c0034b1119b

    • SHA512

      6398d6a4ea0d94772097a12fe6de12d23b49453c2b1285d4342be4f4b7b39bef8df3132e65b20f73159bc67880ceccde2f98ba700ebd40d13dc68610e9429e11

    • SSDEEP

      98304:sZUg5LFvJOTI6UPap4L9NpOlnlwtHTKrvATuE:25SInk4L9jglwtz2ATuE

    Score
    8/10
    vmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks