Overview

overview

8

Static

static

8

3aa7a34f44...cd.exe

windows7-x64

8

3aa7a34f44...cd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3aa7a34f44a8a34a8aa8c014daea369a00e03b16469fee718ce9d34d419012cd

  • Size

    976KB

  • Sample

    221205-jnv9cahh39

  • MD5

    71601c8490badece74029f2b31671ccd

  • SHA1

    0c75b680ae839dadbe653d35a1224cb583e0c574

  • SHA256

    3aa7a34f44a8a34a8aa8c014daea369a00e03b16469fee718ce9d34d419012cd

  • SHA512

    5988b094496dbb2c8fb1539ff9f3af88aa169f630f54bcd98aabd034b4c36b5a9674c2d75e47e23a4d8684e41c7c8ed6781d626a6042cf2f64e2db87b460ef0e

  • SSDEEP

    24576:H5Y2vFzsngsE7KXMFpeZX0xtwFWzSLjJSoNl:Ha2vFonsOX2EX0xtwFWzSXIoN

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      3aa7a34f44a8a34a8aa8c014daea369a00e03b16469fee718ce9d34d419012cd

    • Size

      976KB

    • MD5

      71601c8490badece74029f2b31671ccd

    • SHA1

      0c75b680ae839dadbe653d35a1224cb583e0c574

    • SHA256

      3aa7a34f44a8a34a8aa8c014daea369a00e03b16469fee718ce9d34d419012cd

    • SHA512

      5988b094496dbb2c8fb1539ff9f3af88aa169f630f54bcd98aabd034b4c36b5a9674c2d75e47e23a4d8684e41c7c8ed6781d626a6042cf2f64e2db87b460ef0e

    • SSDEEP

      24576:H5Y2vFzsngsE7KXMFpeZX0xtwFWzSLjJSoNl:Ha2vFonsOX2EX0xtwFWzSXIoN

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks