Overview

overview

7

Static

static

7

ab96b060c2...a8.exe

windows7-x64

7

ab96b060c2...a8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab96b060c27b01b06f5bf707503ca63a591aeb9ae4cf188d65a77ff9a93e00a8

  • Size

    3.9MB

  • Sample

    230808-gq6fzsah63

  • MD5

    1e4eb48556b944f2d7877581e5e63493

  • SHA1

    8f2896f7a6136b3d5749510c297fbc8b6947925a

  • SHA256

    ab96b060c27b01b06f5bf707503ca63a591aeb9ae4cf188d65a77ff9a93e00a8

  • SHA512

    0122f615f229cfb525c71fcee0f17999b4b8cb85a76e6edadcdae3106f3e573de93093220f5eecef75c6ee405dad2484f33697e37141ad3e11645944538e722a

  • SSDEEP

    98304:yrfpSkcPfYcOawG96y+IkupsddcUT4dY19o:yDMdPfYcOaj9FyuSddcUTwk

Score
7/10
aspackv2vmprotect

Malware Config

Targets

    • Target

      ab96b060c27b01b06f5bf707503ca63a591aeb9ae4cf188d65a77ff9a93e00a8

    • Size

      3.9MB

    • MD5

      1e4eb48556b944f2d7877581e5e63493

    • SHA1

      8f2896f7a6136b3d5749510c297fbc8b6947925a

    • SHA256

      ab96b060c27b01b06f5bf707503ca63a591aeb9ae4cf188d65a77ff9a93e00a8

    • SHA512

      0122f615f229cfb525c71fcee0f17999b4b8cb85a76e6edadcdae3106f3e573de93093220f5eecef75c6ee405dad2484f33697e37141ad3e11645944538e722a

    • SSDEEP

      98304:yrfpSkcPfYcOawG96y+IkupsddcUT4dY19o:yDMdPfYcOaj9FyuSddcUTwk

    Score
    7/10
    vmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks