Overview

overview

7

Static

static

7

fa8c4e6c80...5f.exe

windows7-x64

7

fa8c4e6c80...5f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa8c4e6c805e3131b048dac31505b67c13fcbb67e758f58e9d8c876f4081775f

  • Size

    6.9MB

  • Sample

    240425-lhc7pahd82

  • MD5

    ca6220a4e716b72ec37ebee9ba7ed61c

  • SHA1

    30183f56734d48fc2a54e62218a57f49f1535557

  • SHA256

    fa8c4e6c805e3131b048dac31505b67c13fcbb67e758f58e9d8c876f4081775f

  • SHA512

    b4bf9474928e321b3d07e22fd9a6fdd1d2f3014acc46c351bf18061c6a91e4434171168f2e177a5e53853c9a08277980b5c3a7a713a13711bb12ba282dea5f0b

  • SSDEEP

    98304:JE8TblG4keLc0wue7lG4Xwv5pVdFykp1F6OwJB5ZtKPd0MXVbsYrAHbc1K+W6x6p:bMesPa5221BaNk3XhsYrBEA8o

Score
7/10
upxvmprotect

Malware Config

Targets

    • Target

      fa8c4e6c805e3131b048dac31505b67c13fcbb67e758f58e9d8c876f4081775f

    • Size

      6.9MB

    • MD5

      ca6220a4e716b72ec37ebee9ba7ed61c

    • SHA1

      30183f56734d48fc2a54e62218a57f49f1535557

    • SHA256

      fa8c4e6c805e3131b048dac31505b67c13fcbb67e758f58e9d8c876f4081775f

    • SHA512

      b4bf9474928e321b3d07e22fd9a6fdd1d2f3014acc46c351bf18061c6a91e4434171168f2e177a5e53853c9a08277980b5c3a7a713a13711bb12ba282dea5f0b

    • SSDEEP

      98304:JE8TblG4keLc0wue7lG4Xwv5pVdFykp1F6OwJB5ZtKPd0MXVbsYrAHbc1K+W6x6p:bMesPa5221BaNk3XhsYrBEA8o

    Score
    7/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks