Overview

overview

8

Static

static

8

9191033ee3...fa.exe

windows7-x64

8

9191033ee3...fa.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9191033ee3d224e6150d3a5041a38b75bb1169cccb12f7eeb1e23a20ca2354fa

  • Size

    720KB

  • Sample

    221129-f4pvqadb3z

  • MD5

    dbf9e31fcbaa517c50be72135075ac74

  • SHA1

    a4e2fc6a7d61634ad78377fb27ffc48de6ff9865

  • SHA256

    9191033ee3d224e6150d3a5041a38b75bb1169cccb12f7eeb1e23a20ca2354fa

  • SHA512

    4a0d7769a6fcab36da0a5f057e9a1b8bdd1be45ba0d5ebb87baa1e4489bc9827d63752a3174fda6b3c1fc465901458b5b9045ef26b0f97d9e2c39d0b6c20c4b3

  • SSDEEP

    12288:aRu51JEHhxrrkBXrZMcU+mBC+mAfE2WMTyI5deKPKShF:aRavyxGXrZxcmuTTPKo

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      9191033ee3d224e6150d3a5041a38b75bb1169cccb12f7eeb1e23a20ca2354fa

    • Size

      720KB

    • MD5

      dbf9e31fcbaa517c50be72135075ac74

    • SHA1

      a4e2fc6a7d61634ad78377fb27ffc48de6ff9865

    • SHA256

      9191033ee3d224e6150d3a5041a38b75bb1169cccb12f7eeb1e23a20ca2354fa

    • SHA512

      4a0d7769a6fcab36da0a5f057e9a1b8bdd1be45ba0d5ebb87baa1e4489bc9827d63752a3174fda6b3c1fc465901458b5b9045ef26b0f97d9e2c39d0b6c20c4b3

    • SSDEEP

      12288:aRu51JEHhxrrkBXrZMcU+mBC+mAfE2WMTyI5deKPKShF:aRavyxGXrZxcmuTTPKo

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks