a2acb0ede26eb7fe02bd0530194fb02b2c55e520a93197733c51427c29dd19e9 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

a2acb0ede2...e9.exe

windows7-x64

7

a2acb0ede2...e9.exe

windows10-2004-x64

7

Sharing

General

Target

a2acb0ede26eb7fe02bd0530194fb02b2c55e520a93197733c51427c29dd19e9
Size

9.8MB
Sample

241120-tbbpaayqas
MD5

713998985d9253877d350df15b73960e
SHA1

25084c650226fea6723520dfcddd7aeae3cfafeb
SHA256

a2acb0ede26eb7fe02bd0530194fb02b2c55e520a93197733c51427c29dd19e9
SHA512

c3f8d6fb21b8aa9a50262c34536b3677423e19288599276068709526aa8410fe90ec748563c9f488613a4bb7bbcdfdc65cae1388f1c48c43fcb62e73bfddd3be
SSDEEP

196608:Hyu91Hc3U2aFFSmAxz0J3I4Oo19wOZn3rUnLw8J51SHDi0:Suv/dAxo3fdZnALw8vkDl

Score

7^/10

discovery persistence vmprotect

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

a2acb0ede26eb7fe02bd0530194fb02b2c55e520a93197733c51427c29dd19e9.exe

Resource

win7-20241010-en

discovery persistence vmprotect

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

a2acb0ede26eb7fe02bd0530194fb02b2c55e520a93197733c51427c29dd19e9.exe

Resource

win10v2004-20241007-en

discovery persistence vmprotect

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  a2acb0ede26eb7fe02bd0530194fb02b2c55e520a93197733c51427c29dd19e9
- Size
  
  9.8MB
- MD5
  
  713998985d9253877d350df15b73960e
- SHA1
  
  25084c650226fea6723520dfcddd7aeae3cfafeb
- SHA256
  
  a2acb0ede26eb7fe02bd0530194fb02b2c55e520a93197733c51427c29dd19e9
- SHA512
  
  c3f8d6fb21b8aa9a50262c34536b3677423e19288599276068709526aa8410fe90ec748563c9f488613a4bb7bbcdfdc65cae1388f1c48c43fcb62e73bfddd3be
- SSDEEP
  
  196608:Hyu91Hc3U2aFFSmAxz0J3I4Oo19wOZn3rUnLw8J51SHDi0:Suv/dAxo3fdZnALw8vkDl
Score

7^/10

discovery persistence vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencevmprotect

behavioral2

discoverypersistencevmprotect

© 2018-2024

Terms | Privacy