Overview

overview

7

Static

static

7

Microsoft ...mp.exe

windows10-1703-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Microsoft OneDrive.vmp.exe

  • Size

    7.4MB

  • Sample

    240719-z3115stfke

  • MD5

    8f6813495b806aa91a61074ff87e6132

  • SHA1

    182225d2c9c182ad53151f5fcee7ecb27d829f14

  • SHA256

    eefebb284cff768b96faea9a004357d4be7dce2bdd8e9ece55b51950e9097f89

  • SHA512

    47f89df762b8164448c59be05f5cfce0422db12ef97bf9ae791898f62b4c07fb22def39d28cf1e3f32cbcd26bc20c00ee7c2f223bb75ee3c0796f9c483b61728

  • SSDEEP

    196608:S81/OtieLAfO+D4+pSLhZdHXxvXMrnGKQsAaK/2xidCG8:SbCPxWZXvyab20dCG8

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      Microsoft OneDrive.vmp.exe

    • Size

      7.4MB

    • MD5

      8f6813495b806aa91a61074ff87e6132

    • SHA1

      182225d2c9c182ad53151f5fcee7ecb27d829f14

    • SHA256

      eefebb284cff768b96faea9a004357d4be7dce2bdd8e9ece55b51950e9097f89

    • SHA512

      47f89df762b8164448c59be05f5cfce0422db12ef97bf9ae791898f62b4c07fb22def39d28cf1e3f32cbcd26bc20c00ee7c2f223bb75ee3c0796f9c483b61728

    • SSDEEP

      196608:S81/OtieLAfO+D4+pSLhZdHXxvXMrnGKQsAaK/2xidCG8:SbCPxWZXvyab20dCG8

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks