8c074a50a582d89401af738650761c1335110124b29c7e507e459319a2f17fc3 | Triage

Submit
Reports

Overview

overview

8

Static

static

5

8c074a50a5...3N.exe

windows7-x64

8

8c074a50a5...3N.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target

8c074a50a582d89401af738650761c1335110124b29c7e507e459319a2f17fc3N
Size

729KB
Sample

241005-j7qszaygrb
MD5

0274d0c3fba041672ba08a50d8da8c70
SHA1

0e1863c7389bc22caab98503000b6c4ac46360ca
SHA256

8c074a50a582d89401af738650761c1335110124b29c7e507e459319a2f17fc3
SHA512

8d84078b678714bbdb92932d7abda82a50eee86caae74fb7f1e435f4907e06e20d8bb60d71dc244a434afe4dea057eecc14ce8302e2d234d1df54569a6d6fae1
SSDEEP

12288:8Db/rbpa6Fddy43eiUMSYjlpXS6zVFqsEVDVj+ek1PxXHqyq+Sb2zQnmvvoe:8bbpa6FXyiUea6zNEVDV6eAxXKyq3aVV

Score

8^/10

discovery upx vmprotect

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

8c074a50a582d89401af738650761c1335110124b29c7e507e459319a2f17fc3N.exe

Resource

win7-20240729-en

discovery upx vmprotect

windows7-x64

15 signatures

120 seconds

Behavioral task

behavioral2

Sample

8c074a50a582d89401af738650761c1335110124b29c7e507e459319a2f17fc3N.exe

Resource

win10v2004-20240802-en

discovery upx vmprotect

windows10-2004-x64

14 signatures

120 seconds

Malware Config

Targets

- Target
  
  8c074a50a582d89401af738650761c1335110124b29c7e507e459319a2f17fc3N
- Size
  
  729KB
- MD5
  
  0274d0c3fba041672ba08a50d8da8c70
- SHA1
  
  0e1863c7389bc22caab98503000b6c4ac46360ca
- SHA256
  
  8c074a50a582d89401af738650761c1335110124b29c7e507e459319a2f17fc3
- SHA512
  
  8d84078b678714bbdb92932d7abda82a50eee86caae74fb7f1e435f4907e06e20d8bb60d71dc244a434afe4dea057eecc14ce8302e2d234d1df54569a6d6fae1
- SSDEEP
  
  12288:8Db/rbpa6Fddy43eiUMSYjlpXS6zVFqsEVDVj+ek1PxXHqyq+Sb2zQnmvvoe:8bbpa6FXyiUea6zNEVDV6eAxXKyq3aVV
Score

8^/10

discovery upx vmprotect
- Manipulates Digital Signatures
  Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
- Executes dropped EXE
- Loads dropped DLL
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

SIP and Trust Provider Hijacking

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryupxvmprotect

behavioral2

discoveryupxvmprotect

© 2018-2025

Terms | Privacy