Overview

overview

8

Static

static

8

7d1e5a9bb8...45.exe

windows7-x64

8

7d1e5a9bb8...45.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d1e5a9bb88ceb25c346b2747359610fc55095413c5fbcf35040be79d77f1045

  • Size

    2.1MB

  • Sample

    221206-qjn3ssbe78

  • MD5

    1b8e1ec5be0cc927e56d4e8cd8d459bc

  • SHA1

    923932acb2ad8ba930a1bffac9497e9cce8b019a

  • SHA256

    7d1e5a9bb88ceb25c346b2747359610fc55095413c5fbcf35040be79d77f1045

  • SHA512

    58a23a246fcee0e11665de9f360080a798b9c469057ec10694e08d549ee471892d92335a5a67ab5cae8d1f2b2d7c845e328c4fd56439e8c2a4cd48c4e7f90f28

  • SSDEEP

    24576:unRRVwjF0l6LPbjXHkVLi1jHe4BpOikcFGnslauITs0/9EgwOY/VOsmbw7cUDctE:CXlUTHkM1jHe+MB/gDOsmbwAVQfs0H

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      7d1e5a9bb88ceb25c346b2747359610fc55095413c5fbcf35040be79d77f1045

    • Size

      2.1MB

    • MD5

      1b8e1ec5be0cc927e56d4e8cd8d459bc

    • SHA1

      923932acb2ad8ba930a1bffac9497e9cce8b019a

    • SHA256

      7d1e5a9bb88ceb25c346b2747359610fc55095413c5fbcf35040be79d77f1045

    • SHA512

      58a23a246fcee0e11665de9f360080a798b9c469057ec10694e08d549ee471892d92335a5a67ab5cae8d1f2b2d7c845e328c4fd56439e8c2a4cd48c4e7f90f28

    • SSDEEP

      24576:unRRVwjF0l6LPbjXHkVLi1jHe4BpOikcFGnslauITs0/9EgwOY/VOsmbw7cUDctE:CXlUTHkM1jHe+MB/gDOsmbwAVQfs0H

    Score
    8/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks