Overview

overview

7

Static

static

3

e1dc058fc8...ab.exe

windows10-1703-x64

7

Resubmissions

22-03-2024 10:29

240322-mjq1lsdc6w 8

08-05-2023 11:46

230508-nxdg4sad72 7

08-05-2023 11:33

230508-nn5j8sad52 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a.7z

  • Size

    104.3MB

  • Sample

    230508-nxdg4sad72

  • MD5

    a5ec3cc8b641474e277c8277d228c490

  • SHA1

    1b1981e09fda2880f6d2914ed8c42c6915376138

  • SHA256

    c787cef9e7216be955d5f4ff7b305f3f08d1d283ac3f09a01f821bf7b2d4a9a2

  • SHA512

    f47331c336bd51fe1594f7bcd414d19c881954205cb5e9e4c0bd964efe1be9ac5f262fb35cf77abba4ad470a2e24f9611329f4a36679d75760664e8055dd8677

  • SSDEEP

    3145728:dXmm9U2pg/nJSeKHDUc2FofSxwj3WpAerPQ1:xmGU2pgP0HDUc2PA3Ek1

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a/FlixGrab.exe

    • Size

      88.9MB

    • MD5

      4349be1fc47f7aff9ee06d49e9ccd2cf

    • SHA1

      7b7a068b320c51904781fc5e60be3b24fc528352

    • SHA256

      41a8faf9f13ed99084699ed935ec5d2aef6415f036d66872b57be4d2fd38a9e3

    • SHA512

      4afbb125ce655f2abeeca40ad16148d65a9a4cafe09a524b33d4228a960a9e0e077eb87ebc9f6d1ceb6e867203400227be57e4431e279025ad9ecb9b8f8d5a69

    • SSDEEP

      1572864:3/MfZUE8r7sbDvwe+pffl92os5BJ5aTll0dIu/KVwP8PXz6aBrTMzINOWY1E7aMF:vMeEW4P+pXl92/QTMj8vWoczIk12Dwe

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks