Overview

overview

7

Static

static

7

53492b8ca7...8d.exe

windows7-x64

7

53492b8ca7...8d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53492b8ca7018fb38f924d9b7fc14c8c077f04ad7a655edb694a4f526114758d

  • Size

    9.0MB

  • Sample

    240801-znkevawejm

  • MD5

    25f86276032a017c8c76fb39cb4d9ad4

  • SHA1

    5448346bb4c6747fb5cca9b2c3bba90bb9da67cb

  • SHA256

    53492b8ca7018fb38f924d9b7fc14c8c077f04ad7a655edb694a4f526114758d

  • SHA512

    7024b23bec1875af16b4f1336ebc10d9ae41ed542ccb1f4a578b87f2c7d3f2f4fc51d4254c37054bca61d5e3524dec865fa77d474ad282c5bc2e609f9f1e7d03

  • SSDEEP

    196608:qZFzIsSRCjxbjfYp5YX0nqlv0q61yy0PdiPGjLxXBeMIQCr1Abend:aC5KX0nqp0q670PAGjXeKc1v

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      53492b8ca7018fb38f924d9b7fc14c8c077f04ad7a655edb694a4f526114758d

    • Size

      9.0MB

    • MD5

      25f86276032a017c8c76fb39cb4d9ad4

    • SHA1

      5448346bb4c6747fb5cca9b2c3bba90bb9da67cb

    • SHA256

      53492b8ca7018fb38f924d9b7fc14c8c077f04ad7a655edb694a4f526114758d

    • SHA512

      7024b23bec1875af16b4f1336ebc10d9ae41ed542ccb1f4a578b87f2c7d3f2f4fc51d4254c37054bca61d5e3524dec865fa77d474ad282c5bc2e609f9f1e7d03

    • SSDEEP

      196608:qZFzIsSRCjxbjfYp5YX0nqlv0q61yy0PdiPGjLxXBeMIQCr1Abend:aC5KX0nqp0q670PAGjXeKc1v

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks