Overview

overview

7

Static

static

7

JnddT4l.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JnddT4l.exe

  • Size

    5.2MB

  • Sample

    240426-swnznsfd2x

  • MD5

    a6d7b97adca75cf8c65a4bb9d6045022

  • SHA1

    2e387151c6465b5ff4328b0f645bcb33b80244ad

  • SHA256

    11c5ecc207a6fa612db8d193a0ce3a48978e6458ec8818d91e0d0bf1e241ee9e

  • SHA512

    95789bbcabd1d5d82e4033aa185688835b62ddec71bcf0fd4a97449f864295badfe5fd5f556f35b15de9a46f22f5230dfa3253b0d4b2f1502b45d2d68df87585

  • SSDEEP

    98304:40ThhSLznUz+ypVjK9pGNaIG28EeCzlIziRwp28+SiEA:RaLzHOVjapqrTblIziKpP+l

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      JnddT4l.exe

    • Size

      5.2MB

    • MD5

      a6d7b97adca75cf8c65a4bb9d6045022

    • SHA1

      2e387151c6465b5ff4328b0f645bcb33b80244ad

    • SHA256

      11c5ecc207a6fa612db8d193a0ce3a48978e6458ec8818d91e0d0bf1e241ee9e

    • SHA512

      95789bbcabd1d5d82e4033aa185688835b62ddec71bcf0fd4a97449f864295badfe5fd5f556f35b15de9a46f22f5230dfa3253b0d4b2f1502b45d2d68df87585

    • SSDEEP

      98304:40ThhSLznUz+ypVjK9pGNaIG28EeCzlIziRwp28+SiEA:RaLzHOVjapqrTblIziKpP+l

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks