Overview

overview

8

Static

static

8

12b771a58b...f3.exe

windows7-x64

8

12b771a58b...f3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3

  • Size

    2.8MB

  • Sample

    221206-qylafsfe9y

  • MD5

    01e39eada4367163daf2512dd9009660

  • SHA1

    ee681a6b8aa38d86161704a7eb176599466f9260

  • SHA256

    12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3

  • SHA512

    47819caae813026bf5a669382f505403b0bd1a09fe5a01959df3de46c167d4216f5ac8211d1651169638973575cbab849c4028170c6204dc8c1daedfe6d6c3bb

  • SSDEEP

    49152:ko6yjrBWoRCnTEyN8P9mvRPSs9YnLMjcmrnvy5wGU76JpE4Ml51cLY+OsrO4fQn6:koPrBLCTEyOmRPoMhzvRGVJOf1cU+Osr

Score
8/10
upxvmprotect

Malware Config

Targets

    • Target

      12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3

    • Size

      2.8MB

    • MD5

      01e39eada4367163daf2512dd9009660

    • SHA1

      ee681a6b8aa38d86161704a7eb176599466f9260

    • SHA256

      12b771a58b6534bee58f5c1265c5abcd575bb20cb458ac6f2e516ff4db388ef3

    • SHA512

      47819caae813026bf5a669382f505403b0bd1a09fe5a01959df3de46c167d4216f5ac8211d1651169638973575cbab849c4028170c6204dc8c1daedfe6d6c3bb

    • SSDEEP

      49152:ko6yjrBWoRCnTEyN8P9mvRPSs9YnLMjcmrnvy5wGU76JpE4Ml51cLY+OsrO4fQn6:koPrBLCTEyOmRPoMhzvRGVJOf1cU+Osr

    Score
    8/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks