Overview

overview

8

Static

static

8

6874129eec...f5.exe

windows7-x64

8

6874129eec...f5.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6874129eecbea92028341d50af02dcfcfbf27a00603688e2294db4020bc1d6f5

  • Size

    49KB

  • Sample

    221129-j6958aeg3y

  • MD5

    143a73a446876266d430608d6a3d6eb0

  • SHA1

    7f129bca59dac38ceb2eae54cd918cec745f331a

  • SHA256

    6874129eecbea92028341d50af02dcfcfbf27a00603688e2294db4020bc1d6f5

  • SHA512

    d1568900053d8d4b9425286da7d791d2d1667b78696fb40116e3460b3d5c47024826e5f3f0faf87bc7b8f13f0891ab152d3b62d893e33e0777a4a86fb87002ee

  • SSDEEP

    1536:k1QPAzA0bWaBr6Dyc+dv+MdeqvswW7WurRd3:k1QPYbD6D52mFqvsn7Vd3

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      6874129eecbea92028341d50af02dcfcfbf27a00603688e2294db4020bc1d6f5

    • Size

      49KB

    • MD5

      143a73a446876266d430608d6a3d6eb0

    • SHA1

      7f129bca59dac38ceb2eae54cd918cec745f331a

    • SHA256

      6874129eecbea92028341d50af02dcfcfbf27a00603688e2294db4020bc1d6f5

    • SHA512

      d1568900053d8d4b9425286da7d791d2d1667b78696fb40116e3460b3d5c47024826e5f3f0faf87bc7b8f13f0891ab152d3b62d893e33e0777a4a86fb87002ee

    • SSDEEP

      1536:k1QPAzA0bWaBr6Dyc+dv+MdeqvswW7WurRd3:k1QPYbD6D52mFqvsn7Vd3

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks