Overview

overview

7

Static

static

7

80a7d9f891...31.exe

windows7-x64

7

80a7d9f891...31.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80a7d9f8911acde1c5e1d382df836ead8ddbe12ed0f9615dbfe2257f19378331

  • Size

    409KB

  • Sample

    240819-g97s6ayfpf

  • MD5

    21b98438bed61d5d29c7194bceec3a3d

  • SHA1

    b42daa622d33ce10383338656f936c0a9223ca48

  • SHA256

    80a7d9f8911acde1c5e1d382df836ead8ddbe12ed0f9615dbfe2257f19378331

  • SHA512

    4da41c85d82ce876b203c6d2bc030fea8425c137511349f1f8d61f68d3face145993602b8989b71ec7f610e0cac4f95abe2ef2fc04d78e55252b2488da74a0e6

  • SSDEEP

    6144:RZaWqZXus8PTmNzJeEkLB+4lx8i5I9yOE3u/lFWY+ggOcyq1phtfT1llEnx:RgisR9kN+Ix8F9yt+/OY4RflEx

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      80a7d9f8911acde1c5e1d382df836ead8ddbe12ed0f9615dbfe2257f19378331

    • Size

      409KB

    • MD5

      21b98438bed61d5d29c7194bceec3a3d

    • SHA1

      b42daa622d33ce10383338656f936c0a9223ca48

    • SHA256

      80a7d9f8911acde1c5e1d382df836ead8ddbe12ed0f9615dbfe2257f19378331

    • SHA512

      4da41c85d82ce876b203c6d2bc030fea8425c137511349f1f8d61f68d3face145993602b8989b71ec7f610e0cac4f95abe2ef2fc04d78e55252b2488da74a0e6

    • SSDEEP

      6144:RZaWqZXus8PTmNzJeEkLB+4lx8i5I9yOE3u/lFWY+ggOcyq1phtfT1llEnx:RgisR9kN+Ix8F9yt+/OY4RflEx

    Score
    7/10
    discoveryvmprotect

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks