Overview

overview

7

Static

static

7

1e9d1c61c6...2e.dll

windows7-x64

7

1e9d1c61c6...2e.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e9d1c61c6fcaf30e4c4137911422ce718c0587d52fdbb0bb33d0ab1b40ec32e

  • Size

    7.5MB

  • Sample

    231122-vmpwqadg72

  • MD5

    f2b7d5113430e1de524d1952decc5c25

  • SHA1

    8f2d05c3f188674386a7d7c95553277049d58eb9

  • SHA256

    1e9d1c61c6fcaf30e4c4137911422ce718c0587d52fdbb0bb33d0ab1b40ec32e

  • SHA512

    0cc7ff48f1c7a0d15fd27a925050f4e704aba6df985aacf7e3b74cbb9ce89c28ab99e13a96c95fd0062d9f1ee2eeeeffec472ef2c0bcc78e0c54088888df84dc

  • SSDEEP

    196608:SG4lHqMDmH8s2mHsQI93V1DU+fQLXGPNB65o2En2/An:SGAD6d8Q+EXYB65DA/

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      1e9d1c61c6fcaf30e4c4137911422ce718c0587d52fdbb0bb33d0ab1b40ec32e

    • Size

      7.5MB

    • MD5

      f2b7d5113430e1de524d1952decc5c25

    • SHA1

      8f2d05c3f188674386a7d7c95553277049d58eb9

    • SHA256

      1e9d1c61c6fcaf30e4c4137911422ce718c0587d52fdbb0bb33d0ab1b40ec32e

    • SHA512

      0cc7ff48f1c7a0d15fd27a925050f4e704aba6df985aacf7e3b74cbb9ce89c28ab99e13a96c95fd0062d9f1ee2eeeeffec472ef2c0bcc78e0c54088888df84dc

    • SSDEEP

      196608:SG4lHqMDmH8s2mHsQI93V1DU+fQLXGPNB65o2En2/An:SGAD6d8Q+EXYB65DA/

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks