Overview

overview

7

Static

static

7

76e94a2059...f0.exe

windows7-x64

7

76e94a2059...f0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76e94a2059b3e99f81c6ca1621f98298680f893a3b3830a7453caa032c89fbf0

  • Size

    3.9MB

  • Sample

    240929-y58nbssfjc

  • MD5

    9d547636acb02a1bb6c378dcfe61a8c6

  • SHA1

    25c868d2d32222b060fcb51615da62b0bda948c2

  • SHA256

    76e94a2059b3e99f81c6ca1621f98298680f893a3b3830a7453caa032c89fbf0

  • SHA512

    6c237a67df91ad79fee9c4888fe9c3579041c7a886c2ffaa8d6f1fcb02de462252d14381fe65dc490336b6aa67b68ae833f697170a12576c0412578ddea7d84b

  • SSDEEP

    98304:FNBAifTjcTBgdfsczmSiDEXyNADxT98AMZ4O3dugmhKGMwky:FNT0ufscCS6n4N98Qqdug1G

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      76e94a2059b3e99f81c6ca1621f98298680f893a3b3830a7453caa032c89fbf0

    • Size

      3.9MB

    • MD5

      9d547636acb02a1bb6c378dcfe61a8c6

    • SHA1

      25c868d2d32222b060fcb51615da62b0bda948c2

    • SHA256

      76e94a2059b3e99f81c6ca1621f98298680f893a3b3830a7453caa032c89fbf0

    • SHA512

      6c237a67df91ad79fee9c4888fe9c3579041c7a886c2ffaa8d6f1fcb02de462252d14381fe65dc490336b6aa67b68ae833f697170a12576c0412578ddea7d84b

    • SSDEEP

      98304:FNBAifTjcTBgdfsczmSiDEXyNADxT98AMZ4O3dugmhKGMwky:FNT0ufscCS6n4N98Qqdug1G

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks