Overview

overview

7

Static

static

7

1cd913e0be...ed.dll

windows7-x64

7

1cd913e0be...ed.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cd913e0beafc5afa82a7821054d4df90b06516ee7a2c33b81278ba514fe92ed

  • Size

    6.6MB

  • Sample

    231103-jht44aga73

  • MD5

    2140717f27fc63a93ed8af9ab43b9b16

  • SHA1

    050ec47707d94d7f7f477fb37307950ce4f763c5

  • SHA256

    1cd913e0beafc5afa82a7821054d4df90b06516ee7a2c33b81278ba514fe92ed

  • SHA512

    f4a4a8dfb519d27aac1fdc80e138465b71600f2dffcb1e92093d9359c2b06bb6f90565fecaefe08b47685ebe794b1d8c46d74c8f8392284382f3194fda613516

  • SSDEEP

    196608:B0kcy4+ARnEFj57uOE/nqKtI5TlBflP4Uj:B0kL4+AFohuOE/nqKiH4Uj

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      1cd913e0beafc5afa82a7821054d4df90b06516ee7a2c33b81278ba514fe92ed

    • Size

      6.6MB

    • MD5

      2140717f27fc63a93ed8af9ab43b9b16

    • SHA1

      050ec47707d94d7f7f477fb37307950ce4f763c5

    • SHA256

      1cd913e0beafc5afa82a7821054d4df90b06516ee7a2c33b81278ba514fe92ed

    • SHA512

      f4a4a8dfb519d27aac1fdc80e138465b71600f2dffcb1e92093d9359c2b06bb6f90565fecaefe08b47685ebe794b1d8c46d74c8f8392284382f3194fda613516

    • SSDEEP

      196608:B0kcy4+ARnEFj57uOE/nqKtI5TlBflP4Uj:B0kL4+AFohuOE/nqKiH4Uj

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks