Overview

overview

8

Static

static

8

67b5fd1754...a3.exe

windows7-x64

8

67b5fd1754...a3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67b5fd1754c229407f21ae084ab6cccd3100478e45ca872f68274ee19dde8ea3

  • Size

    736KB

  • Sample

    221129-j8lweabg47

  • MD5

    6db25c22147139f10a73befb1050f9ed

  • SHA1

    d6f06e6160a8bc4a767f6cbb7edfb6139f3f291f

  • SHA256

    67b5fd1754c229407f21ae084ab6cccd3100478e45ca872f68274ee19dde8ea3

  • SHA512

    04e4e3df1c2f3582508a31c5769e5098bc8b68b5adb10551a64534f800b4a5f207b056352adaa189ccf252423b34131a96497f029b4285890324a9f46f2a4137

  • SSDEEP

    12288:3rLzYIubBjwFB6sGK7dXAVBj6LyRL8hhDK0pDg7K5L9Gpk3h/:3srtkFBBGqaB3YDxDgux96o/

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      67b5fd1754c229407f21ae084ab6cccd3100478e45ca872f68274ee19dde8ea3

    • Size

      736KB

    • MD5

      6db25c22147139f10a73befb1050f9ed

    • SHA1

      d6f06e6160a8bc4a767f6cbb7edfb6139f3f291f

    • SHA256

      67b5fd1754c229407f21ae084ab6cccd3100478e45ca872f68274ee19dde8ea3

    • SHA512

      04e4e3df1c2f3582508a31c5769e5098bc8b68b5adb10551a64534f800b4a5f207b056352adaa189ccf252423b34131a96497f029b4285890324a9f46f2a4137

    • SSDEEP

      12288:3rLzYIubBjwFB6sGK7dXAVBj6LyRL8hhDK0pDg7K5L9Gpk3h/:3srtkFBBGqaB3YDxDgux96o/

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks