Overview

overview

7

Static

static

7

e82997a70e...2a.exe

windows7-x64

7

e82997a70e...2a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e82997a70e0b39ba4f33e9fcb3b862a50f0bda46f14cee70d497145bb751642a

  • Size

    6.1MB

  • Sample

    240625-14hrmayglk

  • MD5

    7f2d736aa0bceadf56dd6dc94775fd45

  • SHA1

    92fd856ea866c24051a7746093004da05e15ce89

  • SHA256

    e82997a70e0b39ba4f33e9fcb3b862a50f0bda46f14cee70d497145bb751642a

  • SHA512

    aa2c6f97af7840ac69500efd545a6f5a3026515d18b1148274629aa450d9e9837bbdb2c742aede66ce6bdff5a5cc9025ca3310870a9a8d2b60f0b0cb76445085

  • SSDEEP

    98304:lf38J8q4aW4CAHVgQhONQrbgNyYNWFpJhXk53++pLt/dWIxiCU/ouyGUkVNjPCeD:t38J6JNy6WhXk53Xthxo7mkNjP3yzh

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      e82997a70e0b39ba4f33e9fcb3b862a50f0bda46f14cee70d497145bb751642a

    • Size

      6.1MB

    • MD5

      7f2d736aa0bceadf56dd6dc94775fd45

    • SHA1

      92fd856ea866c24051a7746093004da05e15ce89

    • SHA256

      e82997a70e0b39ba4f33e9fcb3b862a50f0bda46f14cee70d497145bb751642a

    • SHA512

      aa2c6f97af7840ac69500efd545a6f5a3026515d18b1148274629aa450d9e9837bbdb2c742aede66ce6bdff5a5cc9025ca3310870a9a8d2b60f0b0cb76445085

    • SSDEEP

      98304:lf38J8q4aW4CAHVgQhONQrbgNyYNWFpJhXk53++pLt/dWIxiCU/ouyGUkVNjPCeD:t38J6JNy6WhXk53Xthxo7mkNjP3yzh

    Score
    7/10
    vmprotect

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks