Overview

overview

8

Static

static

8

bc9e58df6e...84.dll

windows7-x64

5

bc9e58df6e...84.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc9e58df6ea0df6f972a941ec8b3a411b92726e998ea94287adc522c50dd5084

  • Size

    170KB

  • Sample

    221204-f5hsssef7z

  • MD5

    2c5d11704dfaa05b914eb7cf2d6b9fb0

  • SHA1

    9afe2e110d62e391e0ec8f0179370e3b0cd25175

  • SHA256

    bc9e58df6ea0df6f972a941ec8b3a411b92726e998ea94287adc522c50dd5084

  • SHA512

    d246207e0598046339302daadbe6648622eb280b58abb863c334e60133a1320c7d596b75b844122f71de072166fd49db571d97e9a62ae6e6cc70f1bd6357f6cc

  • SSDEEP

    3072:+TtvejdXwDj5cciTeLOjRrJyRQFmHftiqibIojqlfI1+EWvqj:Y2XPbGO1JSIwftiqisoelfVa

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      bc9e58df6ea0df6f972a941ec8b3a411b92726e998ea94287adc522c50dd5084

    • Size

      170KB

    • MD5

      2c5d11704dfaa05b914eb7cf2d6b9fb0

    • SHA1

      9afe2e110d62e391e0ec8f0179370e3b0cd25175

    • SHA256

      bc9e58df6ea0df6f972a941ec8b3a411b92726e998ea94287adc522c50dd5084

    • SHA512

      d246207e0598046339302daadbe6648622eb280b58abb863c334e60133a1320c7d596b75b844122f71de072166fd49db571d97e9a62ae6e6cc70f1bd6357f6cc

    • SSDEEP

      3072:+TtvejdXwDj5cciTeLOjRrJyRQFmHftiqibIojqlfI1+EWvqj:Y2XPbGO1JSIwftiqisoelfVa

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks