Overview

overview

7

Static

static

7

f63b1aa0ef...0f.exe

windows7-x64

7

f63b1aa0ef...0f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f63b1aa0efd5f61a3a0e870ca1a5f8a51f5fc1a9567810b02c31ec6d790bf80f

  • Size

    3.9MB

  • Sample

    230228-ne863aag4x

  • MD5

    dc1e01e75958db6ad8d49cb775e07b3d

  • SHA1

    5f1129e766f821c96d9023f409d40dea0258df88

  • SHA256

    f63b1aa0efd5f61a3a0e870ca1a5f8a51f5fc1a9567810b02c31ec6d790bf80f

  • SHA512

    110acebe6e0432632e9d8c6d9fce1c011a97244ecca6a8717ff2c33f9f590e0239859a7f8a04ba4cf1b88d1c951b1ad4afb0d503d19a631e1d543172de570369

  • SSDEEP

    98304:C9tTDaLicPEC/15fb3mP+8R0GjbAabO0Ti8q:CjT23sC/P6fR0SEOT

Score
7/10
aspackv2vmprotect

Malware Config

Targets

    • Target

      f63b1aa0efd5f61a3a0e870ca1a5f8a51f5fc1a9567810b02c31ec6d790bf80f

    • Size

      3.9MB

    • MD5

      dc1e01e75958db6ad8d49cb775e07b3d

    • SHA1

      5f1129e766f821c96d9023f409d40dea0258df88

    • SHA256

      f63b1aa0efd5f61a3a0e870ca1a5f8a51f5fc1a9567810b02c31ec6d790bf80f

    • SHA512

      110acebe6e0432632e9d8c6d9fce1c011a97244ecca6a8717ff2c33f9f590e0239859a7f8a04ba4cf1b88d1c951b1ad4afb0d503d19a631e1d543172de570369

    • SSDEEP

      98304:C9tTDaLicPEC/15fb3mP+8R0GjbAabO0Ti8q:CjT23sC/P6fR0SEOT

    Score
    7/10
    vmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks