Overview

overview

7

Static

static

7

b7967e7157...47.exe

windows7-x64

7

b7967e7157...47.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7967e715795bae7ec8b45e33c8921eda8a98e87a42cd9949d29ffec9ff5da47

  • Size

    3.9MB

  • Sample

    230225-ng8nbacg8t

  • MD5

    dedb7c2c13d1b47311f9f444b71982f0

  • SHA1

    369317598f4a8521355ac513ecc012bd2e69f837

  • SHA256

    b7967e715795bae7ec8b45e33c8921eda8a98e87a42cd9949d29ffec9ff5da47

  • SHA512

    8cfbe08f2e5586ab4b45bbf4b64fe5ae1a65df2936f92f0ff3f3b174c5cb370b30769fb739a04d4b607c4b56192cde6384767300cae1ab78f07395380f0f626b

  • SSDEEP

    98304:zF4s8T7OD81/h+fIAXICmIl6MfRn+CL41LvxarL86zrz:zF4ZTqw1Ctl6Mpny1LJav86b

Score
7/10
aspackv2vmprotect

Malware Config

Targets

    • Target

      b7967e715795bae7ec8b45e33c8921eda8a98e87a42cd9949d29ffec9ff5da47

    • Size

      3.9MB

    • MD5

      dedb7c2c13d1b47311f9f444b71982f0

    • SHA1

      369317598f4a8521355ac513ecc012bd2e69f837

    • SHA256

      b7967e715795bae7ec8b45e33c8921eda8a98e87a42cd9949d29ffec9ff5da47

    • SHA512

      8cfbe08f2e5586ab4b45bbf4b64fe5ae1a65df2936f92f0ff3f3b174c5cb370b30769fb739a04d4b607c4b56192cde6384767300cae1ab78f07395380f0f626b

    • SSDEEP

      98304:zF4s8T7OD81/h+fIAXICmIl6MfRn+CL41LvxarL86zrz:zF4ZTqw1Ctl6Mpny1LJav86b

    Score
    7/10
    vmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks