Overview

overview

7

Static

static

7

1cdeb9f799...db.exe

windows7-x64

7

1cdeb9f799...db.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db

  • Size

    2.2MB

  • Sample

    231008-ccl3zabg55

  • MD5

    379569a1645d59969694506cdade2207

  • SHA1

    7af02a24eef40f7debeda2852c3cdb766cd3ab70

  • SHA256

    1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db

  • SHA512

    179c5ee119ac29b8204b72ef371a8a3a6522e79c04b7a9471d15c5b57b4f5f09dc4b11c7f726569f727ad98bb8d4cae9bbbd37cdae6e14a80a245071b27168c3

  • SSDEEP

    49152:1tT87iT/FMyaKd06gjtKGwsAX4GbbmHRvdO7idaSglp1:HT1zzaKxUA4GbbmZdVdazp

Score
7/10
aspackv2vmprotect

Malware Config

Targets

    • Target

      1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db

    • Size

      2.2MB

    • MD5

      379569a1645d59969694506cdade2207

    • SHA1

      7af02a24eef40f7debeda2852c3cdb766cd3ab70

    • SHA256

      1cdeb9f799af4b87a4758a886da54609b25b26645b83e4e4498928e57e8f05db

    • SHA512

      179c5ee119ac29b8204b72ef371a8a3a6522e79c04b7a9471d15c5b57b4f5f09dc4b11c7f726569f727ad98bb8d4cae9bbbd37cdae6e14a80a245071b27168c3

    • SSDEEP

      49152:1tT87iT/FMyaKd06gjtKGwsAX4GbbmHRvdO7idaSglp1:HT1zzaKxUA4GbbmZdVdazp

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks