Overview

overview

7

Static

static

3

b486a03226...26.exe

windows7-x64

7

b486a03226...26.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b486a032265bd56c4a1e8bace44680ca6c64dab0837423513d644a7052dc5426

  • Size

    1.7MB

  • Sample

    240806-mx9pwa1eke

  • MD5

    6b93b3de8a4411a47e24aa95b45deb80

  • SHA1

    1c86e46ae899ca8b83ef8479187b5ab5fc998e1f

  • SHA256

    b486a032265bd56c4a1e8bace44680ca6c64dab0837423513d644a7052dc5426

  • SHA512

    ea068ece848516ec2398b7d120eeb85afc8786edc8238f8e41cde9854f45487a1da21dd03838b7c40574cafe5b8c3ce2d539195fe626c56dcb739f8c8e5c101c

  • SSDEEP

    49152:gT6ESriPVYhI1FqbU7+C1GBmr3xnuNhSD8kFkxk17JwkIjI:KmhGqQKC+qBp7JwNI

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      b486a032265bd56c4a1e8bace44680ca6c64dab0837423513d644a7052dc5426

    • Size

      1.7MB

    • MD5

      6b93b3de8a4411a47e24aa95b45deb80

    • SHA1

      1c86e46ae899ca8b83ef8479187b5ab5fc998e1f

    • SHA256

      b486a032265bd56c4a1e8bace44680ca6c64dab0837423513d644a7052dc5426

    • SHA512

      ea068ece848516ec2398b7d120eeb85afc8786edc8238f8e41cde9854f45487a1da21dd03838b7c40574cafe5b8c3ce2d539195fe626c56dcb739f8c8e5c101c

    • SSDEEP

      49152:gT6ESriPVYhI1FqbU7+C1GBmr3xnuNhSD8kFkxk17JwkIjI:KmhGqQKC+qBp7JwNI

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks