Overview

overview

7

Static

static

7

b9a6b7dd4d...4e.exe

windows7-x64

7

b9a6b7dd4d...4e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9a6b7dd4d36a394e522d7da0ec6c589bcc5705f06f495e1812f08f0f499f64e

  • Size

    1.1MB

  • Sample

    240903-c8n77swfne

  • MD5

    655b4ed318e5a7ab4813aa351624de43

  • SHA1

    b1f7c0255581f35a612a411b2de6bc584bb108b9

  • SHA256

    b9a6b7dd4d36a394e522d7da0ec6c589bcc5705f06f495e1812f08f0f499f64e

  • SHA512

    7643167415ce6e5774e62e1422850ffbc09c83f09c0e6d66208e6a3f6087d5834eeacf38b3115774c0da4ff0f47d993df5637f3e4b702dc12d1569ffbdabc2b6

  • SSDEEP

    24576:Uu8IKlvmFVYE0yTdw0iCwneVxEOPyQrAeM+kH6m1S:R4YYlSliMxZrFPo6mU

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      b9a6b7dd4d36a394e522d7da0ec6c589bcc5705f06f495e1812f08f0f499f64e

    • Size

      1.1MB

    • MD5

      655b4ed318e5a7ab4813aa351624de43

    • SHA1

      b1f7c0255581f35a612a411b2de6bc584bb108b9

    • SHA256

      b9a6b7dd4d36a394e522d7da0ec6c589bcc5705f06f495e1812f08f0f499f64e

    • SHA512

      7643167415ce6e5774e62e1422850ffbc09c83f09c0e6d66208e6a3f6087d5834eeacf38b3115774c0da4ff0f47d993df5637f3e4b702dc12d1569ffbdabc2b6

    • SSDEEP

      24576:Uu8IKlvmFVYE0yTdw0iCwneVxEOPyQrAeM+kH6m1S:R4YYlSliMxZrFPo6mU

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks