Overview

overview

8

Static

static

8

97dfda1e42...15.exe

windows7-x64

8

97dfda1e42...15.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97dfda1e4250bf35edc723f865f64fccde8d8bf4148b93ddb5a37d32da94fc15

  • Size

    49KB

  • Sample

    221129-fhtlsabb6z

  • MD5

    46ce5176f565435db0a589609759bca0

  • SHA1

    9ff7799f63c290946a470947cbd20af4beffaa49

  • SHA256

    97dfda1e4250bf35edc723f865f64fccde8d8bf4148b93ddb5a37d32da94fc15

  • SHA512

    786eb78be4905a2afbecd5e2b33d180e7e0403f706f7c050d9061cf604783ecc04ca5ebed887f1c046e92b5a2480bb3b0d0a5b8dec381c4bdbe6cf12febb297b

  • SSDEEP

    1536:H1QPAzA0bWaBr6Dyc+dv+MdeqvswW7WurRd3:H1QPYbD6D52mFqvsn7Vd3

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      97dfda1e4250bf35edc723f865f64fccde8d8bf4148b93ddb5a37d32da94fc15

    • Size

      49KB

    • MD5

      46ce5176f565435db0a589609759bca0

    • SHA1

      9ff7799f63c290946a470947cbd20af4beffaa49

    • SHA256

      97dfda1e4250bf35edc723f865f64fccde8d8bf4148b93ddb5a37d32da94fc15

    • SHA512

      786eb78be4905a2afbecd5e2b33d180e7e0403f706f7c050d9061cf604783ecc04ca5ebed887f1c046e92b5a2480bb3b0d0a5b8dec381c4bdbe6cf12febb297b

    • SSDEEP

      1536:H1QPAzA0bWaBr6Dyc+dv+MdeqvswW7WurRd3:H1QPYbD6D52mFqvsn7Vd3

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks