Overview

overview

7

Static

static

7

AR_External0207.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    AR_External0207.exe

  • Size

    5.2MB

  • Sample

    240229-a1vnxahd93

  • MD5

    10262f632aeca6176df01e0da2c27c90

  • SHA1

    bc2abc232207569622016d074d2541ba83115471

  • SHA256

    7783a99af4485ce797c32cc1b6d4cd475be9c527d231fe588c14339ee5785da4

  • SHA512

    d248ee86fdbe2c7e90278edd0608d493848da60cdb7de862bbc0bab7df23b9e54197d2d8c7c2692ec4c4972afecf1dfa0d80836b1fa61d737d11db77bd3bdd75

  • SSDEEP

    98304:LeEmzd1dxd2LOLyGleSDC1vEztL9ThzUhUx/vLI:LeH51sJGkSDlpN93xn

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      AR_External0207.exe

    • Size

      5.2MB

    • MD5

      10262f632aeca6176df01e0da2c27c90

    • SHA1

      bc2abc232207569622016d074d2541ba83115471

    • SHA256

      7783a99af4485ce797c32cc1b6d4cd475be9c527d231fe588c14339ee5785da4

    • SHA512

      d248ee86fdbe2c7e90278edd0608d493848da60cdb7de862bbc0bab7df23b9e54197d2d8c7c2692ec4c4972afecf1dfa0d80836b1fa61d737d11db77bd3bdd75

    • SSDEEP

      98304:LeEmzd1dxd2LOLyGleSDC1vEztL9ThzUhUx/vLI:LeH51sJGkSDlpN93xn

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks