Overview

overview

8

Static

static

8

788d2fe0ee...c0.exe

windows7-x64

8

788d2fe0ee...c0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    788d2fe0eec70ae6770a68fae40296d02e9631319c75bf1358f18a6f481f8fc0

  • Size

    708KB

  • Sample

    221205-jba3msgg85

  • MD5

    bec94e18348cdb40f555feff44b25a03

  • SHA1

    6df6773eac30d38bd52097da05998ad37ec8d7ba

  • SHA256

    788d2fe0eec70ae6770a68fae40296d02e9631319c75bf1358f18a6f481f8fc0

  • SHA512

    5bfa49530f920542cd28a428a369a99871ac5eb6bef53066ed4f98d9187aca8bede3815661356787d2bd2685c6d216e6ea60cb7aff9dad901781d555d3bed0f8

  • SSDEEP

    12288:9+HHlzXHkOFjfssMjd1LnaCFyEZrQzDBq+j8YaZ6:9k0OBsHd1PFyEZrQzDD8DZ6

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      788d2fe0eec70ae6770a68fae40296d02e9631319c75bf1358f18a6f481f8fc0

    • Size

      708KB

    • MD5

      bec94e18348cdb40f555feff44b25a03

    • SHA1

      6df6773eac30d38bd52097da05998ad37ec8d7ba

    • SHA256

      788d2fe0eec70ae6770a68fae40296d02e9631319c75bf1358f18a6f481f8fc0

    • SHA512

      5bfa49530f920542cd28a428a369a99871ac5eb6bef53066ed4f98d9187aca8bede3815661356787d2bd2685c6d216e6ea60cb7aff9dad901781d555d3bed0f8

    • SSDEEP

      12288:9+HHlzXHkOFjfssMjd1LnaCFyEZrQzDBq+j8YaZ6:9k0OBsHd1PFyEZrQzDD8DZ6

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks