Overview

overview

8

Static

static

8

8a38977f50...c9.exe

windows7-x64

8

8a38977f50...c9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a38977f50be14273034234cc2f0c59a77217bd53b7b30273b28ce68b70fbec9

  • Size

    110KB

  • Sample

    221129-gmn3jabf68

  • MD5

    e292c21c4caf405c04e6c93e2e9c3779

  • SHA1

    bea9a2ad63fcc5160f40721d1240d8f78474fab9

  • SHA256

    8a38977f50be14273034234cc2f0c59a77217bd53b7b30273b28ce68b70fbec9

  • SHA512

    de1a70205af80f1cfcc32ed446f631e19ee237eb279d8bb1ee28244dda056d200bc8c43014001ea9b64e551a5180f20a1215e3907054fda6474e90aa415ad9cd

  • SSDEEP

    1536:BWFPAmCJfEEajHwWXKM3UBH/jqI64R7clmsLB9Fpb4pxwWX6o:BWFPAbdEtscAH/jqI6nhbFpXWX7

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      8a38977f50be14273034234cc2f0c59a77217bd53b7b30273b28ce68b70fbec9

    • Size

      110KB

    • MD5

      e292c21c4caf405c04e6c93e2e9c3779

    • SHA1

      bea9a2ad63fcc5160f40721d1240d8f78474fab9

    • SHA256

      8a38977f50be14273034234cc2f0c59a77217bd53b7b30273b28ce68b70fbec9

    • SHA512

      de1a70205af80f1cfcc32ed446f631e19ee237eb279d8bb1ee28244dda056d200bc8c43014001ea9b64e551a5180f20a1215e3907054fda6474e90aa415ad9cd

    • SSDEEP

      1536:BWFPAmCJfEEajHwWXKM3UBH/jqI64R7clmsLB9Fpb4pxwWX6o:BWFPAbdEtscAH/jqI6nhbFpXWX7

    Score
    8/10
    vmprotect

    • Drops file in Drivers directory

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Replication Through Removable Media

1
T1091

Execution

Command-Line Interface

1
T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Replication Through Removable Media

1
T1091

Collection

Exfiltration

Command and Control

Impact

Tasks