Overview

overview

8

Static

static

7

B9HxGSsgMc8Ju.exe

windows7-x64

8

B9HxGSsgMc8Ju.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    B9HxGSsgMc8Ju.exe

  • Size

    3.4MB

  • Sample

    240313-21ca4sbf6x

  • MD5

    a198d2e7ddac7c3d381da9b2e5446142

  • SHA1

    61aff012de5ac9eb5247f182320b1df434a22c93

  • SHA256

    f432910b309b296e4cf2e662092657060f0e24222ccf1239a67c69b9db8daf68

  • SHA512

    6e661c2c46ea0f57dc0dafe0e01bc32258d740d9938bec27b7558ae020ff51cdfd41351df52b06da86f25dc59c318fa37660b7da51ad34dd69b0f8bcbcb6b44a

  • SSDEEP

    98304:ZBvIB2CVEqzsJGwUv6Fvx6KW2wBBJIdnjjgI8D:ZekJGwUi1WMjjW

Score
8/10
persistencevmprotect

Malware Config

Targets

    • Target

      B9HxGSsgMc8Ju.exe

    • Size

      3.4MB

    • MD5

      a198d2e7ddac7c3d381da9b2e5446142

    • SHA1

      61aff012de5ac9eb5247f182320b1df434a22c93

    • SHA256

      f432910b309b296e4cf2e662092657060f0e24222ccf1239a67c69b9db8daf68

    • SHA512

      6e661c2c46ea0f57dc0dafe0e01bc32258d740d9938bec27b7558ae020ff51cdfd41351df52b06da86f25dc59c318fa37660b7da51ad34dd69b0f8bcbcb6b44a

    • SSDEEP

      98304:ZBvIB2CVEqzsJGwUv6Fvx6KW2wBBJIdnjjgI8D:ZekJGwUi1WMjjW

    Score
    8/10
    persistencevmprotect

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks