Overview

overview

8

Static

static

8

5e3b5dfb13...b2.exe

windows7-x64

8

5e3b5dfb13...b2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8498322212.zip

  • Size

    4.4MB

  • Sample

    221129-krkgpadd93

  • MD5

    5efb51d32f38d7d3d67121f55a2d6849

  • SHA1

    6d24d94c85347c6a1031920f998bd309ae081e25

  • SHA256

    1097d1bce312d4f00a9625f4edd7a9d558ee5351a6574fa3394ee9e2a66d7956

  • SHA512

    c18e40718d2f4ab9044574914062ac51c313256b8eb38c08f9c78657ad42519e0ec3591d74fa15936dd26d460a3dc593c0b867c5accfdf4abf33ad726325b9e3

  • SSDEEP

    98304:sKVPke46eac2uarbJ9JiXtCxesA5Ghhtg6V5Cnv0+jk1IpwpY:GHXarbNiXtM+QucCnM/1IN

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      5e3b5dfb1324cecfae22728323ca804e8f46b949b86998fc32ca5a16e31c45b2

    • Size

      4.6MB

    • MD5

      abf8ce24084059625e02328dbc72e1c7

    • SHA1

      5d98299177c4b55572d96dfb1b93e141c9de9c2e

    • SHA256

      5e3b5dfb1324cecfae22728323ca804e8f46b949b86998fc32ca5a16e31c45b2

    • SHA512

      5f6eed58cf70c583e48d101919f8f4803dcb8c02193bcd5b6bc0ed731ebff5c0876323d44fd4bad0ae81b4e37f5897f6595878210efb5fff9245762a68a44179

    • SSDEEP

      98304:D8ZNWuqWiSagBBKI82NGSvagu0FcV2U1LBri2224SaCos8jr0GUgh10uiV9tWLhj:DCqWieBKI82N1K0SV2U9BOX24S0s8H0M

    Score
    8/10
    vmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks