Overview

overview

10

Static

static

3

2324e54d5e...e3.exe

windows7-x64

10

2324e54d5e...e3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2324e54d5ef445c47f5235ba9e45ad205736404bda4054165f5a6d37ae127fe3

  • Size

    5.9MB

  • Sample

    230923-ebnlhseb93

  • MD5

    5722e1c24aa5a8148684bff04b66b920

  • SHA1

    ea64f25091334f82364b9c2deca35117fe97e377

  • SHA256

    2324e54d5ef445c47f5235ba9e45ad205736404bda4054165f5a6d37ae127fe3

  • SHA512

    358d82c42e3dff0e9feec0b8109adb95ac88e66ce3a41ecf356d3afe19cf157e26eaab353c38536e5632108ae0b8425e4fa92844b390a5cdf274668f9574eeb8

  • SSDEEP

    98304:wq212l06v2y1fnVj+vCcUS/c+pwiA8WmR2om9qvGwMFqpabw+/IN6xOeFh8mDByZ:8l6v2y1fVp9S/l27nu2x8GwMFqAbx/IH

Score
10/10
evasionvmprotect

Malware Config

Targets

    • Target

      2324e54d5ef445c47f5235ba9e45ad205736404bda4054165f5a6d37ae127fe3

    • Size

      5.9MB

    • MD5

      5722e1c24aa5a8148684bff04b66b920

    • SHA1

      ea64f25091334f82364b9c2deca35117fe97e377

    • SHA256

      2324e54d5ef445c47f5235ba9e45ad205736404bda4054165f5a6d37ae127fe3

    • SHA512

      358d82c42e3dff0e9feec0b8109adb95ac88e66ce3a41ecf356d3afe19cf157e26eaab353c38536e5632108ae0b8425e4fa92844b390a5cdf274668f9574eeb8

    • SSDEEP

      98304:wq212l06v2y1fnVj+vCcUS/c+pwiA8WmR2om9qvGwMFqpabw+/IN6xOeFh8mDByZ:8l6v2y1fVp9S/l27nu2x8GwMFqAbx/IH

    Score
    10/10
    evasionvmprotect

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks