Overview

overview

7

Static

static

7

d1ee2d3c78...de.exe

windows7-x64

7

d1ee2d3c78...de.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1ee2d3c785e2869367374fab8a119ce45aab76167c1c76b07f522ecc8c3b9de

  • Size

    688KB

  • Sample

    230825-mxpppscf41

  • MD5

    5e633fee9b885654dd8216a2ff805647

  • SHA1

    7ccaf2dc971354c45cacb8d470dea31f07b5036f

  • SHA256

    d1ee2d3c785e2869367374fab8a119ce45aab76167c1c76b07f522ecc8c3b9de

  • SHA512

    c8b385579090a5213ce6b6d69f9c455c02873f93533a67913d2721ee7bb356696b7dd2b371fb021913646483f922b96119fe0ee5d143051eeecdda29d33c0024

  • SSDEEP

    12288:zSH0wSUl0m8uWRVtWjFLapkZn+VWv5foZgqfaoVivfGtIrK0CgM1dHzeMaCS2BB:eU1ZmlWvcFckZn+VWvOZ5fPsW512C

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      d1ee2d3c785e2869367374fab8a119ce45aab76167c1c76b07f522ecc8c3b9de

    • Size

      688KB

    • MD5

      5e633fee9b885654dd8216a2ff805647

    • SHA1

      7ccaf2dc971354c45cacb8d470dea31f07b5036f

    • SHA256

      d1ee2d3c785e2869367374fab8a119ce45aab76167c1c76b07f522ecc8c3b9de

    • SHA512

      c8b385579090a5213ce6b6d69f9c455c02873f93533a67913d2721ee7bb356696b7dd2b371fb021913646483f922b96119fe0ee5d143051eeecdda29d33c0024

    • SSDEEP

      12288:zSH0wSUl0m8uWRVtWjFLapkZn+VWv5foZgqfaoVivfGtIrK0CgM1dHzeMaCS2BB:eU1ZmlWvcFckZn+VWvOZ5fPsW512C

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks