Overview

overview

7

Static

static

7

Forcer.exe

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Forcer.exe

  • Size

    4.8MB

  • Sample

    231031-lg8l7sfb9y

  • MD5

    9d7f6b5a015a6b6c4b662cab81516f35

  • SHA1

    132c6968d98baa05394a084669d9ac541262fe16

  • SHA256

    6aa903849c567148f51cca6b6fb380714c382b4eb8d7bef8a42e6dcbf1be5bda

  • SHA512

    b814c1af42c924498291a8e7bb68b8181eeecda7397f475c1a7b2a5ee4c7186194ad774d32c5a619ee0f5c25ff69254c8a8b5499427fa4fdac9827a351a642db

  • SSDEEP

    98304:obQWlOLeB4SF5OOPj/kGYwkbyZW0vAwBs54ewNMSBRz6:oCe2SFAOPLkGYyVAwBs5yNMWR

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      Forcer.exe

    • Size

      4.8MB

    • MD5

      9d7f6b5a015a6b6c4b662cab81516f35

    • SHA1

      132c6968d98baa05394a084669d9ac541262fe16

    • SHA256

      6aa903849c567148f51cca6b6fb380714c382b4eb8d7bef8a42e6dcbf1be5bda

    • SHA512

      b814c1af42c924498291a8e7bb68b8181eeecda7397f475c1a7b2a5ee4c7186194ad774d32c5a619ee0f5c25ff69254c8a8b5499427fa4fdac9827a351a642db

    • SSDEEP

      98304:obQWlOLeB4SF5OOPj/kGYwkbyZW0vAwBs54ewNMSBRz6:oCe2SFAOPLkGYyVAwBs5yNMWR

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks