Overview

overview

7

Static

static

7

1d13826dfd...a0.exe

windows7-x64

7

1d13826dfd...a0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d13826dfdbaf075d7393406742db2494cd49b9f138d11839365d467e5821aa0

  • Size

    5.3MB

  • Sample

    240615-k8rx4ayelm

  • MD5

    af1d01a42cf9af2fb9c3c35593a5b871

  • SHA1

    de148d411fea1518bbef28a4f53064ed804209bb

  • SHA256

    1d13826dfdbaf075d7393406742db2494cd49b9f138d11839365d467e5821aa0

  • SHA512

    edeafaadc3bde9d430cb30fb33c025778af166a00e6f0b53885da2f851f2f437433a6184e2e547dc248913f8026c02f16ffe52b2ff4161cd29c0e839e4372e5a

  • SSDEEP

    98304:owqzmOVnO4fX5T/rWHXBhi9r717qlEEuyOHD9lf6k09g2j1g3bbLg1bAx0qo9kaM:ozVnHvpYBhi9YWEuy/giW3v/FoPF

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      1d13826dfdbaf075d7393406742db2494cd49b9f138d11839365d467e5821aa0

    • Size

      5.3MB

    • MD5

      af1d01a42cf9af2fb9c3c35593a5b871

    • SHA1

      de148d411fea1518bbef28a4f53064ed804209bb

    • SHA256

      1d13826dfdbaf075d7393406742db2494cd49b9f138d11839365d467e5821aa0

    • SHA512

      edeafaadc3bde9d430cb30fb33c025778af166a00e6f0b53885da2f851f2f437433a6184e2e547dc248913f8026c02f16ffe52b2ff4161cd29c0e839e4372e5a

    • SSDEEP

      98304:owqzmOVnO4fX5T/rWHXBhi9r717qlEEuyOHD9lf6k09g2j1g3bbLg1bAx0qo9kaM:ozVnHvpYBhi9YWEuy/giW3v/FoPF

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks