Overview

overview

7

Static

static

7

Permanent_Loader.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Permanent_Loader.exe

  • Size

    5.1MB

  • Sample

    230530-3nkbmaca95

  • MD5

    adafde1dc3ab8eecd5e611cf6427dbf5

  • SHA1

    424245983e0996571c989f6d6f5236702fda800e

  • SHA256

    6c716a49ea22e7d028ccde485d5c4ddc236369c9b60eedd3602d0172d42a5b9c

  • SHA512

    ad418c58ab787934b42420a5c43e0066f2732d5c9594f21496013931aaddca77bb4f39547dd7eb02e1aad3330d573bae72abf3e57cb4341e81da53f0e661b58d

  • SSDEEP

    98304:eq/WT/VbNl7PAk96LpTVfCjENZvSHj/F9gY2lF/N:5uNndALpVfCj68Hx9l2L1

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      Permanent_Loader.exe

    • Size

      5.1MB

    • MD5

      adafde1dc3ab8eecd5e611cf6427dbf5

    • SHA1

      424245983e0996571c989f6d6f5236702fda800e

    • SHA256

      6c716a49ea22e7d028ccde485d5c4ddc236369c9b60eedd3602d0172d42a5b9c

    • SHA512

      ad418c58ab787934b42420a5c43e0066f2732d5c9594f21496013931aaddca77bb4f39547dd7eb02e1aad3330d573bae72abf3e57cb4341e81da53f0e661b58d

    • SSDEEP

      98304:eq/WT/VbNl7PAk96LpTVfCjENZvSHj/F9gY2lF/N:5uNndALpVfCj68Hx9l2L1

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks