Overview

overview

7

Static

static

7

5c9688b5aa...d3.exe

windows7-x64

7

5c9688b5aa...d3.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5c9688b5aaa437dccbaff40b009066b8cca63ebb35e4b465aba62afdb627abd3

  • Size

    14.4MB

  • Sample

    231010-czf58saa7z

  • MD5

    ae1a0c9473ad9b9e217007e10de6658c

  • SHA1

    e1caf703c4cedc93f6c9192bf8ba9600f4e1d627

  • SHA256

    5c9688b5aaa437dccbaff40b009066b8cca63ebb35e4b465aba62afdb627abd3

  • SHA512

    e89514ad559fac7207710adda1fe7e66b1815ebb88db0e770cac39e39b2653095bd526e59d22010cc7260eca0e319198b12f3568dce15c10f6403da3b2fc4bd2

  • SSDEEP

    393216:Uq0fV5BBYwGX7kSMYmU+YMCF0XZ2B2Fd8:Uqi5NGrZnf+YPF0XcB2X8

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      5c9688b5aaa437dccbaff40b009066b8cca63ebb35e4b465aba62afdb627abd3

    • Size

      14.4MB

    • MD5

      ae1a0c9473ad9b9e217007e10de6658c

    • SHA1

      e1caf703c4cedc93f6c9192bf8ba9600f4e1d627

    • SHA256

      5c9688b5aaa437dccbaff40b009066b8cca63ebb35e4b465aba62afdb627abd3

    • SHA512

      e89514ad559fac7207710adda1fe7e66b1815ebb88db0e770cac39e39b2653095bd526e59d22010cc7260eca0e319198b12f3568dce15c10f6403da3b2fc4bd2

    • SSDEEP

      393216:Uq0fV5BBYwGX7kSMYmU+YMCF0XZ2B2Fd8:Uqi5NGrZnf+YPF0XcB2X8

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks