Overview

overview

7

Static

static

7

20b949c43d...73.exe

windows7-x64

7

20b949c43d...73.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    20b949c43d7023d8433fadf6a54ef783e5b143be0dcba04f0bef4d081225f873

  • Size

    584KB

  • Sample

    231014-bj42paba55

  • MD5

    51681b8ad8a947a9920764bd637f3cde

  • SHA1

    a0a197e75fba9f4faaa72a2029a3eb46a652fe17

  • SHA256

    20b949c43d7023d8433fadf6a54ef783e5b143be0dcba04f0bef4d081225f873

  • SHA512

    9e8bd8c181579826219d9fe9b2622afa274ce060d86f197d415c9fed03fa3b63e3ea91641254a292cf63ef3118788ce64afc215736dd34629246b103ecd4de59

  • SSDEEP

    12288:orrlnh95O+RKd0FYPqSSnfK8jlh8qNcybyQrk1zmBhv2uG:GhfO+dCqSSfKKhLZmE2h

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      20b949c43d7023d8433fadf6a54ef783e5b143be0dcba04f0bef4d081225f873

    • Size

      584KB

    • MD5

      51681b8ad8a947a9920764bd637f3cde

    • SHA1

      a0a197e75fba9f4faaa72a2029a3eb46a652fe17

    • SHA256

      20b949c43d7023d8433fadf6a54ef783e5b143be0dcba04f0bef4d081225f873

    • SHA512

      9e8bd8c181579826219d9fe9b2622afa274ce060d86f197d415c9fed03fa3b63e3ea91641254a292cf63ef3118788ce64afc215736dd34629246b103ecd4de59

    • SSDEEP

      12288:orrlnh95O+RKd0FYPqSSnfK8jlh8qNcybyQrk1zmBhv2uG:GhfO+dCqSSfKKhLZmE2h

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks