Overview

overview

8

Static

static

3

2c67c5e549...9c.exe

windows7-x64

8

2c67c5e549...9c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2c67c5e549d71c1c680f5c96936a7d48435c8d73bd8fafed5b5a8493cdfa999c

  • Size

    1.3MB

  • Sample

    231014-bj2lkahc2t

  • MD5

    558bc602b25b8db9b378f2fd0e9afae3

  • SHA1

    c4c07ad217b8fe7ca6af747237244385abfa2d84

  • SHA256

    2c67c5e549d71c1c680f5c96936a7d48435c8d73bd8fafed5b5a8493cdfa999c

  • SHA512

    a26cda0e85f39f4d242ec83a31e840e0eb7443ca0760c64a09c578da969f9a57a1fb7de3a4ae285f7cbf3ae4cf15fbed3612747234134915af43d92e87084ab2

  • SSDEEP

    24576:3Vuewq/OJLLGnVqiIKeISpq63lZE4u+N31+TRFnb168CqwO:luewqMGnr5yYnT/nJ5Cq

Score
8/10
evasionpersistencevmprotect

Malware Config

Targets

    • Target

      2c67c5e549d71c1c680f5c96936a7d48435c8d73bd8fafed5b5a8493cdfa999c

    • Size

      1.3MB

    • MD5

      558bc602b25b8db9b378f2fd0e9afae3

    • SHA1

      c4c07ad217b8fe7ca6af747237244385abfa2d84

    • SHA256

      2c67c5e549d71c1c680f5c96936a7d48435c8d73bd8fafed5b5a8493cdfa999c

    • SHA512

      a26cda0e85f39f4d242ec83a31e840e0eb7443ca0760c64a09c578da969f9a57a1fb7de3a4ae285f7cbf3ae4cf15fbed3612747234134915af43d92e87084ab2

    • SSDEEP

      24576:3Vuewq/OJLLGnVqiIKeISpq63lZE4u+N31+TRFnb168CqwO:luewqMGnr5yYnT/nJ5Cq

    Score
    8/10
    evasionpersistencevmprotect

    • Sets service image path in registry

      persistence

    • Stops running service(s)

      evasion

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks