Overview

overview

7

Static

static

7

6ecb9e8ef7...9a.exe

windows7-x64

7

6ecb9e8ef7...9a.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a

  • Size

    3.0MB

  • Sample

    231008-b8tl9abg28

  • MD5

    cddc174c6c9e3aee7d83589a203cfa28

  • SHA1

    a565602ddcdfe926ea92bed35d5c0f56e2e17c4d

  • SHA256

    6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a

  • SHA512

    c2277c0e954d101973fccf06508269335b4361bea8eba8f771caecb39d0a5b49df1fa1c819384373b89cd4583e1a3b2580afe1ba78bebe99eae5113a8ec36de0

  • SSDEEP

    49152:V2sd6xejQQCCiO23ORcOAFXlpiiQV/gsEFRQOEKgd6GJM9b0RIgIUT1hE5Omv4lL:V7cQCCiO2IcOKtQNgsEFvoTJML/UbEo1

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a

    • Size

      3.0MB

    • MD5

      cddc174c6c9e3aee7d83589a203cfa28

    • SHA1

      a565602ddcdfe926ea92bed35d5c0f56e2e17c4d

    • SHA256

      6ecb9e8ef77eff0ffd634d9b42ff8c2a3a7cd14db193227ccfa2189df811fb9a

    • SHA512

      c2277c0e954d101973fccf06508269335b4361bea8eba8f771caecb39d0a5b49df1fa1c819384373b89cd4583e1a3b2580afe1ba78bebe99eae5113a8ec36de0

    • SSDEEP

      49152:V2sd6xejQQCCiO23ORcOAFXlpiiQV/gsEFRQOEKgd6GJM9b0RIgIUT1hE5Omv4lL:V7cQCCiO2IcOKtQNgsEFvoTJML/UbEo1

    Score
    7/10
    vmprotect

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks