Overview

overview

7

Static

static

7

2168c4d1c2...0b.exe

windows7-x64

7

2168c4d1c2...0b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2168c4d1c2fcd12f2dbc5ab82239690b

  • Size

    288KB

  • Sample

    231225-qmecrshgar

  • MD5

    2168c4d1c2fcd12f2dbc5ab82239690b

  • SHA1

    aea2ce3791d5a61b7a249d6e223731ddc3151776

  • SHA256

    47c3cab670defee6b9b0f0b1dea04a2114eac60f5dd143ac22c322de75adfdc8

  • SHA512

    0aa7722c74831392c16fa8583eb45cbbf19fbcae09f6737ce0cec773f260e84a7a976841134958c9288eddc0fd45bbd75df0b1442a91693ae0cd34f5e9c6ed63

  • SSDEEP

    6144:e7DLVNzxsDK6YG2ko/B+JStyKQyGU3jDZeQYoexiOa2:e73GK6YG2koEJSt/QG3jQQYo

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      2168c4d1c2fcd12f2dbc5ab82239690b

    • Size

      288KB

    • MD5

      2168c4d1c2fcd12f2dbc5ab82239690b

    • SHA1

      aea2ce3791d5a61b7a249d6e223731ddc3151776

    • SHA256

      47c3cab670defee6b9b0f0b1dea04a2114eac60f5dd143ac22c322de75adfdc8

    • SHA512

      0aa7722c74831392c16fa8583eb45cbbf19fbcae09f6737ce0cec773f260e84a7a976841134958c9288eddc0fd45bbd75df0b1442a91693ae0cd34f5e9c6ed63

    • SSDEEP

      6144:e7DLVNzxsDK6YG2ko/B+JStyKQyGU3jDZeQYoexiOa2:e73GK6YG2koEJSt/QG3jQQYo

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks