Overview

overview

8

Static

static

8

2bfe66f919...42.exe

windows7-x64

8

2bfe66f919...42.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bfe66f919a246a58c4caf60606c0b612cfed819fa4dacedc6d0eab0fc392642

  • Size

    1.2MB

  • Sample

    221201-mjanmadd3s

  • MD5

    e148b8ce66c584f5e9affb47808e251b

  • SHA1

    d95fd0e36af4db7b5d5745cf4718bbbd8fb0a229

  • SHA256

    2bfe66f919a246a58c4caf60606c0b612cfed819fa4dacedc6d0eab0fc392642

  • SHA512

    25ec6b47f66c32a982a5e9c94e5a4edacc79bdeec326afb064a9055b5d94fc03a2ffee74c2c3166d48d0062419d12f9f225b559fb9139ad4b1fcbe9599ffe357

  • SSDEEP

    24576:eAU8WGNi0q2pom+uFjECaOiuz2PAelzwOi/8Lg+w49:edLOiYpom+xO3aPAufi0k949

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      2bfe66f919a246a58c4caf60606c0b612cfed819fa4dacedc6d0eab0fc392642

    • Size

      1.2MB

    • MD5

      e148b8ce66c584f5e9affb47808e251b

    • SHA1

      d95fd0e36af4db7b5d5745cf4718bbbd8fb0a229

    • SHA256

      2bfe66f919a246a58c4caf60606c0b612cfed819fa4dacedc6d0eab0fc392642

    • SHA512

      25ec6b47f66c32a982a5e9c94e5a4edacc79bdeec326afb064a9055b5d94fc03a2ffee74c2c3166d48d0062419d12f9f225b559fb9139ad4b1fcbe9599ffe357

    • SSDEEP

      24576:eAU8WGNi0q2pom+uFjECaOiuz2PAelzwOi/8Lg+w49:edLOiYpom+xO3aPAufi0k949

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks