Overview

overview

7

Static

static

7

d41dbbaaf6...31.exe

windows7-x64

7

d41dbbaaf6...31.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d41dbbaaf606a2ef3364a9b76368393da097dce4e8e98e23fd9cc4668c81f031

  • Size

    3.9MB

  • Sample

    240907-zhacpatfkp

  • MD5

    dc496bd14dd2e209ad20379481c3a2d8

  • SHA1

    635688b8b473008507296f9d9a405dae616d538c

  • SHA256

    d41dbbaaf606a2ef3364a9b76368393da097dce4e8e98e23fd9cc4668c81f031

  • SHA512

    2e5da36702d1dc834faa488105d4717d905a80e7e11b40c2370e024c1f202a12fece7b5f4ce456353b7afbf17e23eaed71de0cba1dbac93f38ffa0b8aaf965f8

  • SSDEEP

    98304:6rEL+r9L5SbWf+YFCkd2HZc44B3bIcHnSvcrUJZ90Gyo:BILQaf+Hkd+Zu8KycsO

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      d41dbbaaf606a2ef3364a9b76368393da097dce4e8e98e23fd9cc4668c81f031

    • Size

      3.9MB

    • MD5

      dc496bd14dd2e209ad20379481c3a2d8

    • SHA1

      635688b8b473008507296f9d9a405dae616d538c

    • SHA256

      d41dbbaaf606a2ef3364a9b76368393da097dce4e8e98e23fd9cc4668c81f031

    • SHA512

      2e5da36702d1dc834faa488105d4717d905a80e7e11b40c2370e024c1f202a12fece7b5f4ce456353b7afbf17e23eaed71de0cba1dbac93f38ffa0b8aaf965f8

    • SSDEEP

      98304:6rEL+r9L5SbWf+YFCkd2HZc44B3bIcHnSvcrUJZ90Gyo:BILQaf+Hkd+Zu8KycsO

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks