Overview

overview

7

Static

static

7

Spoof.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Spoof.exe

  • Size

    6.7MB

  • Sample

    230326-p6grkaae4w

  • MD5

    be2fb7083265a28606ee1a4842818936

  • SHA1

    7e0c124692ae0ad69c545aee936fa9d88049289f

  • SHA256

    638f8d580ead5433ba0dd375e4d4cce3062f9e930ae201f8cb3d83d1d6906a4d

  • SHA512

    2f3204c483178324573b240febb73c56de73c293de59fd8e926202206b187bc2dd844f345539aa74ec0ec508672fd7fd26f3558a27499c774b31febecfbf085d

  • SSDEEP

    196608:rG5Heio40dbTvZm0mgVyhAFiI6KpqpQ9TAn0/q5s0DjewyWRaY+VPD:6lo40NB2gVyBIJEQhY0C5tvewDRO

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      Spoof.exe

    • Size

      6.7MB

    • MD5

      be2fb7083265a28606ee1a4842818936

    • SHA1

      7e0c124692ae0ad69c545aee936fa9d88049289f

    • SHA256

      638f8d580ead5433ba0dd375e4d4cce3062f9e930ae201f8cb3d83d1d6906a4d

    • SHA512

      2f3204c483178324573b240febb73c56de73c293de59fd8e926202206b187bc2dd844f345539aa74ec0ec508672fd7fd26f3558a27499c774b31febecfbf085d

    • SSDEEP

      196608:rG5Heio40dbTvZm0mgVyhAFiI6KpqpQ9TAn0/q5s0DjewyWRaY+VPD:6lo40NB2gVyBIJEQhY0C5tvewDRO

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks