Overview

overview

7

Static

static

7

5c5c643727...b3.exe

windows7-x64

7

5c5c643727...b3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c5c64372704f24c6a7fe22f061008d21c9ad20685462643e5d0633520402fb3

  • Size

    9.0MB

  • Sample

    240521-rpmycsha6y

  • MD5

    a29e6861487985ce7251acac36e7b7a8

  • SHA1

    997f1f7bdf2819527a9ed1622d778c44d4b5dee3

  • SHA256

    5c5c64372704f24c6a7fe22f061008d21c9ad20685462643e5d0633520402fb3

  • SHA512

    2773963f3a88ce3354d222cc8191b824d3a6e78f314ee16190f006154599d5b7a7b6a044d8abe29f1a5c34150f796042b575631fbe20fdd46e621840aa9a63a1

  • SSDEEP

    196608:mWMKwL4fvrdHjTC2lR5cVeZolGvWart5WuLpiU3BoGCADEob1ek7BBh:mW9wmvhDm2eVeZosuar+IOADEAekVBh

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      5c5c64372704f24c6a7fe22f061008d21c9ad20685462643e5d0633520402fb3

    • Size

      9.0MB

    • MD5

      a29e6861487985ce7251acac36e7b7a8

    • SHA1

      997f1f7bdf2819527a9ed1622d778c44d4b5dee3

    • SHA256

      5c5c64372704f24c6a7fe22f061008d21c9ad20685462643e5d0633520402fb3

    • SHA512

      2773963f3a88ce3354d222cc8191b824d3a6e78f314ee16190f006154599d5b7a7b6a044d8abe29f1a5c34150f796042b575631fbe20fdd46e621840aa9a63a1

    • SSDEEP

      196608:mWMKwL4fvrdHjTC2lR5cVeZolGvWart5WuLpiU3BoGCADEob1ek7BBh:mW9wmvhDm2eVeZosuar+IOADEAekVBh

    Score
    7/10
    vmprotect

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks