Overview

overview

7

Static

static

7

ubiorbitapi_r2.dll

windows7-x64

7

ubiorbitapi_r2.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3de214faf8e613e8f53d7c1d0155420_JaffaCakes118

  • Size

    738KB

  • Sample

    240416-tzkxvsgd7w

  • MD5

    f3de214faf8e613e8f53d7c1d0155420

  • SHA1

    e9fb99bf23a3eb0e6e1868b45381ca2d3853da8b

  • SHA256

    e08d97713ab2cf5f4a9159b0454ecef679d7b2e4d83dd855678b7e701f0b820f

  • SHA512

    ac56ac1f1dd64f60e2536f88864de843b2e82f3911398dff79b0f1e8db2230ce7cca8659fa4b1b4b4b087b521ce19b4fb580bec9eeea6419a17ec598a6ef343c

  • SSDEEP

    12288:JL9+sVzL4mH7xM0xzgXcMnEg3ZZwG89Dr/XYwF32jtd0G4rx38xH8dxgknTJhfZe:Jx4SVZgMMnEg3rK93vYw2LYrxs5knd3m

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      ubiorbitapi_r2.dll

    • Size

      749KB

    • MD5

      86ba92c8c93593d0dac364c8cad2346d

    • SHA1

      9ad987aed677a595cb6cb507a12a014989d4e597

    • SHA256

      79e6323661385f527d3774ec3abc002e402c4e2870ae0d6412c825c7d4556675

    • SHA512

      543b5281bb0e2ffb0b9ad0d105ab00e2b9e1e4531edc658561bc5e9913cf1210ff6a4ae32da9468bfb2c7151b967a386062f9f96296f5afee818a33de5cf3c07

    • SSDEEP

      12288:vNH+1gxr2WF9Bqx8lP2J01htFH/nydD0M9gRcCDtrZnw0Xu5ZGFaw:1H+16r2+9BNt2u1htFH/ny+fdxreku5M

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks