Overview

overview

8

Static

static

8

9efec9bd6f...e4.dll

windows7-x64

8

9efec9bd6f...e4.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9efec9bd6f0ab7fdf9aef3faec92ef5caa95e18c0a8a75b96f297c3c0c3d38e4

  • Size

    170KB

  • Sample

    221205-v1m92sdg61

  • MD5

    d27e009b1c85e40f0a625cb2f8588830

  • SHA1

    d7c8b87dd53140609252ec354b064b692e52e3d4

  • SHA256

    9efec9bd6f0ab7fdf9aef3faec92ef5caa95e18c0a8a75b96f297c3c0c3d38e4

  • SHA512

    4a6ad0c702398e89b1b2309049e8910ec7455e4226ecac29b063c6105f57fe5201e16a5ab27b2c355f586f632299b5655afb0ae739d46b7fa8415ae6e8811171

  • SSDEEP

    3072:pTtvejdXwDj5cciTeLOjRrJyRQFmHftiqibIojqlfI1+EWvqj:H2XPbGO1JSIwftiqisoelfVa

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      9efec9bd6f0ab7fdf9aef3faec92ef5caa95e18c0a8a75b96f297c3c0c3d38e4

    • Size

      170KB

    • MD5

      d27e009b1c85e40f0a625cb2f8588830

    • SHA1

      d7c8b87dd53140609252ec354b064b692e52e3d4

    • SHA256

      9efec9bd6f0ab7fdf9aef3faec92ef5caa95e18c0a8a75b96f297c3c0c3d38e4

    • SHA512

      4a6ad0c702398e89b1b2309049e8910ec7455e4226ecac29b063c6105f57fe5201e16a5ab27b2c355f586f632299b5655afb0ae739d46b7fa8415ae6e8811171

    • SSDEEP

      3072:pTtvejdXwDj5cciTeLOjRrJyRQFmHftiqibIojqlfI1+EWvqj:H2XPbGO1JSIwftiqisoelfVa

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks