Overview

overview

7

Static

static

7

194c5aaa85...b6.dll

windows7-x64

7

194c5aaa85...b6.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    194c5aaa8547b8329c2ae83a10a1cb9ef3174d9283d272ec84aac257a5bae3b6

  • Size

    15.5MB

  • Sample

    230823-rng1qaeb5z

  • MD5

    3bdcd75d5ab05891d7dd0d9b07ec226e

  • SHA1

    8335b404fa74ffd811fdee1592a46f9ee7ffb78f

  • SHA256

    194c5aaa8547b8329c2ae83a10a1cb9ef3174d9283d272ec84aac257a5bae3b6

  • SHA512

    650f709e8e5be98928823121c76a5253ba9244cefde847b2ed448a7b4ccff4d7c91c597040ab3e6327ba35cf6f482ad9c201bbfec046835b6be13ed213e89e23

  • SSDEEP

    98304:vyNy0A8YhUdvgOgx024Z6y48PpXLX8STODpG/RRNWfN7:MdYn024X4D

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      194c5aaa8547b8329c2ae83a10a1cb9ef3174d9283d272ec84aac257a5bae3b6

    • Size

      15.5MB

    • MD5

      3bdcd75d5ab05891d7dd0d9b07ec226e

    • SHA1

      8335b404fa74ffd811fdee1592a46f9ee7ffb78f

    • SHA256

      194c5aaa8547b8329c2ae83a10a1cb9ef3174d9283d272ec84aac257a5bae3b6

    • SHA512

      650f709e8e5be98928823121c76a5253ba9244cefde847b2ed448a7b4ccff4d7c91c597040ab3e6327ba35cf6f482ad9c201bbfec046835b6be13ed213e89e23

    • SSDEEP

      98304:vyNy0A8YhUdvgOgx024Z6y48PpXLX8STODpG/RRNWfN7:MdYn024X4D

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks