Overview

overview

7

Static

static

7

06d5e4f30d...2c.exe

windows7-x64

7

06d5e4f30d...2c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    06d5e4f30d7c09deac41baba96af7d2c

  • Size

    856KB

  • Sample

    231225-fsce9adfh8

  • MD5

    06d5e4f30d7c09deac41baba96af7d2c

  • SHA1

    3c209ce6f55a4f7fc514adc2feb8e5078e1726f0

  • SHA256

    e69169a88ed792b4927243105074631c9b505c7b7405c213220d95855efba304

  • SHA512

    861631e443bde353563b536974f430c56348f3f5d9e0ec3e9b683d98ca5cef85e842908f7105e66dd16b8eaad9e2a92823d170449add05f6eb3361f77cfd6d3e

  • SSDEEP

    24576:Jr2gCMo1GEYDh0KoylKYLU7Wmq68ecSST3FFI8:Jr2JMo8EcU7Wm7cS2F

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      06d5e4f30d7c09deac41baba96af7d2c

    • Size

      856KB

    • MD5

      06d5e4f30d7c09deac41baba96af7d2c

    • SHA1

      3c209ce6f55a4f7fc514adc2feb8e5078e1726f0

    • SHA256

      e69169a88ed792b4927243105074631c9b505c7b7405c213220d95855efba304

    • SHA512

      861631e443bde353563b536974f430c56348f3f5d9e0ec3e9b683d98ca5cef85e842908f7105e66dd16b8eaad9e2a92823d170449add05f6eb3361f77cfd6d3e

    • SSDEEP

      24576:Jr2gCMo1GEYDh0KoylKYLU7Wmq68ecSST3FFI8:Jr2JMo8EcU7Wm7cS2F

    Score
    7/10
    vmprotect

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks