Overview

overview

7

Static

static

7

PlYOm4R.exe

windows7-x64

7

PlYOm4R.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    PlYOm4R.exe

  • Size

    6.0MB

  • Sample

    231011-q1rj9acd68

  • MD5

    ac2af74868a38ce07b19bdddf49101e8

  • SHA1

    b9659223672618c130264cb1772557d64f903c7c

  • SHA256

    30a22eae09465db2e86c983a05dfefe17de4c24a76d4e080ff7f4017bd725ffd

  • SHA512

    e5f0283ce384f7e3936c201af1b2f9b7f542528e39a641d50c3390110ad3d921becd738e26fe8c9efea9f9435333a7d729de1dbbdfe9458a9bbdbdc6602eacf6

  • SSDEEP

    196608:28DNm5EwOY8ryMFp8C41GY2hPpU0YJyD7skc:3DEbKhL8fG7hPauD7Zc

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      PlYOm4R.exe

    • Size

      6.0MB

    • MD5

      ac2af74868a38ce07b19bdddf49101e8

    • SHA1

      b9659223672618c130264cb1772557d64f903c7c

    • SHA256

      30a22eae09465db2e86c983a05dfefe17de4c24a76d4e080ff7f4017bd725ffd

    • SHA512

      e5f0283ce384f7e3936c201af1b2f9b7f542528e39a641d50c3390110ad3d921becd738e26fe8c9efea9f9435333a7d729de1dbbdfe9458a9bbdbdc6602eacf6

    • SSDEEP

      196608:28DNm5EwOY8ryMFp8C41GY2hPpU0YJyD7skc:3DEbKhL8fG7hPauD7Zc

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks