Overview

overview

7

Static

static

7

example.exe

windows7-x64

7

example.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    example.com

  • Size

    6.3MB

  • Sample

    241023-hqzh4syepk

  • MD5

    e60af31f4480371ea23d39ffcaf167b3

  • SHA1

    b922cbbf49773ccd7d6f14294729c854ca2df4cf

  • SHA256

    dd03a0d38bf27cdc34d99cc57d204c7c31cb724c39adf47e1311385f24e0fed0

  • SHA512

    61cf360e4687e0af7ec0c5bb16b803637217a661a9d881a498460f951d65f622a1c7b0c4a97669b24bdc30fdd0463d3ed4f60a1af26882f9df7d09f33e9b9052

  • SSDEEP

    196608:m0DOQfdYeQievkq5++2kOroixH4+vpgJYLqlSUwXVBWZVO:7DOQfdYeQievfb8Fbvmrl5a5

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      example.com

    • Size

      6.3MB

    • MD5

      e60af31f4480371ea23d39ffcaf167b3

    • SHA1

      b922cbbf49773ccd7d6f14294729c854ca2df4cf

    • SHA256

      dd03a0d38bf27cdc34d99cc57d204c7c31cb724c39adf47e1311385f24e0fed0

    • SHA512

      61cf360e4687e0af7ec0c5bb16b803637217a661a9d881a498460f951d65f622a1c7b0c4a97669b24bdc30fdd0463d3ed4f60a1af26882f9df7d09f33e9b9052

    • SSDEEP

      196608:m0DOQfdYeQievkq5++2kOroixH4+vpgJYLqlSUwXVBWZVO:7DOQfdYeQievfb8Fbvmrl5a5

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks