Overview

overview

7

Static

static

3

1298b6fd5a...67.exe

windows7-x64

7

1298b6fd5a...67.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1298b6fd5a4918f0585ba6652cd38a67

  • Size

    21.3MB

  • Sample

    231230-jpdexsdghk

  • MD5

    1298b6fd5a4918f0585ba6652cd38a67

  • SHA1

    7d281e0a6996612b4b6f13f3321d02be6b2929ed

  • SHA256

    f55c254683a6b7b1ceab3f2fd2204ffa267e90388fff76bcf23461db95e62706

  • SHA512

    f7cd4ce116569f33062b9b4d2b29b5c873e291e48923c57aef81b734e96267ab0ffbfe1fd86eeb3c1e8b172d5ed093d46dcba8dcdf14394de16d33d86ad693a9

  • SSDEEP

    393216:DbyihM4Gqyi2IPqtA30U7F1GQkEYF4/gX6+zI7mpMN+d08DKtsNY4orLmx76d2:XbfquEU7rGQkd4/A6+zIRILO4orC760

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      1298b6fd5a4918f0585ba6652cd38a67

    • Size

      21.3MB

    • MD5

      1298b6fd5a4918f0585ba6652cd38a67

    • SHA1

      7d281e0a6996612b4b6f13f3321d02be6b2929ed

    • SHA256

      f55c254683a6b7b1ceab3f2fd2204ffa267e90388fff76bcf23461db95e62706

    • SHA512

      f7cd4ce116569f33062b9b4d2b29b5c873e291e48923c57aef81b734e96267ab0ffbfe1fd86eeb3c1e8b172d5ed093d46dcba8dcdf14394de16d33d86ad693a9

    • SSDEEP

      393216:DbyihM4Gqyi2IPqtA30U7F1GQkEYF4/gX6+zI7mpMN+d08DKtsNY4orLmx76d2:XbfquEU7rGQkd4/A6+zIRILO4orC760

    Score
    7/10
    vmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks