Overview

overview

7

Static

static

7

31669d6dd1...64.exe

windows7-x64

7

31669d6dd1...64.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    31669d6dd136f2f3d2dcce5944318e64

  • Size

    4.4MB

  • Sample

    240409-1ynqpadf42

  • MD5

    31669d6dd136f2f3d2dcce5944318e64

  • SHA1

    bd9efa11e0085a55c3f9102c6a811fcd26e1f79a

  • SHA256

    3f47a4bb6db9f8f926a9f754f475d00ffa39238bc331c61b91c97b65ce76f1a8

  • SHA512

    bdb63cc1638231682629addf32fb9de51257c46401a170a2f700ea288584b8cc53864bfd44cf81c1fef202e30018209437bfde60834ced84c61fe96d54eb3654

  • SSDEEP

    98304:lqs7WQUP+Mxzy8RjJ+6qKgv9dAdw+EKnU3pO9uCon:wsCQy+N8RjJUKO9dagRZOg

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      31669d6dd136f2f3d2dcce5944318e64

    • Size

      4.4MB

    • MD5

      31669d6dd136f2f3d2dcce5944318e64

    • SHA1

      bd9efa11e0085a55c3f9102c6a811fcd26e1f79a

    • SHA256

      3f47a4bb6db9f8f926a9f754f475d00ffa39238bc331c61b91c97b65ce76f1a8

    • SHA512

      bdb63cc1638231682629addf32fb9de51257c46401a170a2f700ea288584b8cc53864bfd44cf81c1fef202e30018209437bfde60834ced84c61fe96d54eb3654

    • SSDEEP

      98304:lqs7WQUP+Mxzy8RjJ+6qKgv9dAdw+EKnU3pO9uCon:wsCQy+N8RjJUKO9dagRZOg

    Score
    7/10
    vmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks