Overview

overview

8

Static

static

8

d7a3a60eda...25.exe

windows7-x64

8

d7a3a60eda...25.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7a3a60edaebe8082bddb089c8ce32773a91cfecc08523c478fe14659caef825

  • Size

    400KB

  • Sample

    221205-hzlzdafh22

  • MD5

    eeccd64e5a546a2d77fc46841b5dc7f9

  • SHA1

    228a1128f9887e6be925e9f89de0560a5235407f

  • SHA256

    d7a3a60edaebe8082bddb089c8ce32773a91cfecc08523c478fe14659caef825

  • SHA512

    81d82ffea6396da76725986d32a5b08b8cfa77341319267ac9dda723f992a2dd97a868b465a88c3ef1b58f673a06a81126fa5a2de07312582d01f226cf87a526

  • SSDEEP

    6144:njM0sguIrHFqDjwp9I9M2QqI8BK5TBOxi5s55WShrR8qfVsoEoHE:j5uIrlsEc9f68BK59OdzrjBHE

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      d7a3a60edaebe8082bddb089c8ce32773a91cfecc08523c478fe14659caef825

    • Size

      400KB

    • MD5

      eeccd64e5a546a2d77fc46841b5dc7f9

    • SHA1

      228a1128f9887e6be925e9f89de0560a5235407f

    • SHA256

      d7a3a60edaebe8082bddb089c8ce32773a91cfecc08523c478fe14659caef825

    • SHA512

      81d82ffea6396da76725986d32a5b08b8cfa77341319267ac9dda723f992a2dd97a868b465a88c3ef1b58f673a06a81126fa5a2de07312582d01f226cf87a526

    • SSDEEP

      6144:njM0sguIrHFqDjwp9I9M2QqI8BK5TBOxi5s55WShrR8qfVsoEoHE:j5uIrlsEc9f68BK59OdzrjBHE

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks