Overview

overview

7

Static

static

7

完整克隆8.exe

windows7-x64

7

完整克隆8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    完整克隆8.exe

  • Size

    1.0MB

  • Sample

    230818-2ek15agb51

  • MD5

    9f6b5cb1d118cadaf1e81d97665d86c2

  • SHA1

    43b9dba7e7ecf84b8a770d99f5e624c5d405dda1

  • SHA256

    faee0919269371892d80c8a9ed9e96edb74b326a70d322e244a3a04c7f2fa990

  • SHA512

    2e2fd6561143a4c674b89fda3fc0b43e23b752e55cec0facb1adcd3f20a7ff907dc57f62568589b6a86c68f210f6b8c6102d321a931e25a09f89a79cd8652aa8

  • SSDEEP

    24576:C3zhlKC3UktdxTYzyHwOaHicYzdpJjp8RBPWLUWXexo1iSOsO7:C3mCkkjxTYa7zJdVYWLZDUB

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      完整克隆8.exe

    • Size

      1.0MB

    • MD5

      9f6b5cb1d118cadaf1e81d97665d86c2

    • SHA1

      43b9dba7e7ecf84b8a770d99f5e624c5d405dda1

    • SHA256

      faee0919269371892d80c8a9ed9e96edb74b326a70d322e244a3a04c7f2fa990

    • SHA512

      2e2fd6561143a4c674b89fda3fc0b43e23b752e55cec0facb1adcd3f20a7ff907dc57f62568589b6a86c68f210f6b8c6102d321a931e25a09f89a79cd8652aa8

    • SSDEEP

      24576:C3zhlKC3UktdxTYzyHwOaHicYzdpJjp8RBPWLUWXexo1iSOsO7:C3mCkkjxTYa7zJdVYWLZDUB

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks