Overview

overview

7

Static

static

7

faee091926...90.exe

windows7-x64

7

faee091926...90.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    faee0919269371892d80c8a9ed9e96edb74b326a70d322e244a3a04c7f2fa990.exe.zip

  • Size

    1.0MB

  • Sample

    231231-bgw83adha3

  • MD5

    47651723c4d7a39a6769b461a8de7150

  • SHA1

    b354fd0ba8de175316c47471c73267dfe5f10604

  • SHA256

    6699fb38e27c4335d12b68c521c20d8da7a8154e3cbfef082f7b138ba79b42db

  • SHA512

    b9de9695be600776d9e7146e99005d46369056f8329465cc26457fb8d1c133a737d2496bbf06266dacc4a1d66ca43c5cfbb260c797f3c95316b17e3574cc369b

  • SSDEEP

    24576:Ru5fYpwAg5bg0VwfWxW9zNvnxtIhitfy6LMY1E0j4T+f:6fYpYJg0VwuxO/xtIhx+k+f

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      faee0919269371892d80c8a9ed9e96edb74b326a70d322e244a3a04c7f2fa990.exe

    • Size

      1.0MB

    • MD5

      9f6b5cb1d118cadaf1e81d97665d86c2

    • SHA1

      43b9dba7e7ecf84b8a770d99f5e624c5d405dda1

    • SHA256

      faee0919269371892d80c8a9ed9e96edb74b326a70d322e244a3a04c7f2fa990

    • SHA512

      2e2fd6561143a4c674b89fda3fc0b43e23b752e55cec0facb1adcd3f20a7ff907dc57f62568589b6a86c68f210f6b8c6102d321a931e25a09f89a79cd8652aa8

    • SSDEEP

      24576:C3zhlKC3UktdxTYzyHwOaHicYzdpJjp8RBPWLUWXexo1iSOsO7:C3mCkkjxTYa7zJdVYWLZDUB

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks