Overview

overview

7

Static

static

7

VMProtect_Con.exe

windows7-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    VMProtect_Con.exe

  • Size

    12.8MB

  • Sample

    240704-nvc4kawfkn

  • MD5

    b76394e5895c038e600e1fa22a627670

  • SHA1

    b9f8f7c07f69c3aa5e4308268c02b6098664b234

  • SHA256

    6c7d58b61c0127f07ad2c99fe760d3e4acc75119754497cc75035c62ef53e2ce

  • SHA512

    5887252da53e1d514d3e8b4b1f750679e86b2c61239b6d9e8c3580ecdee391c79da71608962ae9b920e1d78ba6f8ab9d2c7322b30e28da7198ee8b70d26b8145

  • SSDEEP

    196608:Js8CvGyVpzVjlhBN5nOkyTMoVD0Nr1MmxR/fF38cu3AUJPX6m5xz/p:Js8+R1BN5gTVt07MER3SFAU96ejp

Score
7/10
upx

Malware Config

Targets

    • Target

      VMProtect_Con.exe

    • Size

      12.8MB

    • MD5

      b76394e5895c038e600e1fa22a627670

    • SHA1

      b9f8f7c07f69c3aa5e4308268c02b6098664b234

    • SHA256

      6c7d58b61c0127f07ad2c99fe760d3e4acc75119754497cc75035c62ef53e2ce

    • SHA512

      5887252da53e1d514d3e8b4b1f750679e86b2c61239b6d9e8c3580ecdee391c79da71608962ae9b920e1d78ba6f8ab9d2c7322b30e28da7198ee8b70d26b8145

    • SSDEEP

      196608:Js8CvGyVpzVjlhBN5nOkyTMoVD0Nr1MmxR/fF38cu3AUJPX6m5xz/p:Js8+R1BN5gTVt07MER3SFAU96ejp

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks