Overview

overview

8

Static

static

7

Panda_Ulti...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Panda_Ultimate Old Loader.exe

  • Size

    5.2MB

  • Sample

    230324-szsf9shd61

  • MD5

    d66851b2f21c45925bc18377682c84b5

  • SHA1

    3e9bbfed894dae98afcb174c4c8d941a3c40d2f5

  • SHA256

    7b0bb42b025ae170b58ce04b91aa481f040454f7fca5697088d999847afd50fe

  • SHA512

    527fe8b25ee9184de0c14e733ddfabed0bea4ea77d7fc91ecb7aa53d0aa1abe017c79428734aa47fd44de29cdb916a14e3c56fc0d77e64b4bd0ceba71da499b3

  • SSDEEP

    98304:/Tjm6RjDdpleuGdTbBzuYr5X7BqYakFtrkV8yEkO6NzOlZ6i0/q:/Tj/R3N9kJ/7Bq668wNzUoi

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      Panda_Ultimate Old Loader.exe

    • Size

      5.2MB

    • MD5

      d66851b2f21c45925bc18377682c84b5

    • SHA1

      3e9bbfed894dae98afcb174c4c8d941a3c40d2f5

    • SHA256

      7b0bb42b025ae170b58ce04b91aa481f040454f7fca5697088d999847afd50fe

    • SHA512

      527fe8b25ee9184de0c14e733ddfabed0bea4ea77d7fc91ecb7aa53d0aa1abe017c79428734aa47fd44de29cdb916a14e3c56fc0d77e64b4bd0ceba71da499b3

    • SSDEEP

      98304:/Tjm6RjDdpleuGdTbBzuYr5X7BqYakFtrkV8yEkO6NzOlZ6i0/q:/Tj/R3N9kJ/7Bq668wNzUoi

    Score
    8/10
    vmprotect

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks