Overview

overview

7

Static

static

7

e0cbbcba7c...d3.exe

windows7-x64

7

e0cbbcba7c...d3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0cbbcba7c23450110ba06dcbc6aa50394808a45deb217a80c4fa734f27da8d3

  • Size

    11.0MB

  • Sample

    241121-m9ys5swlep

  • MD5

    6f1a6cf00868b87ff30337a55de3dc86

  • SHA1

    9d8a0a8f9152603758e31b1f7f14a06e22be07c7

  • SHA256

    e0cbbcba7c23450110ba06dcbc6aa50394808a45deb217a80c4fa734f27da8d3

  • SHA512

    a0f080d6828d1fbcaeb56dcdeec9265c848b91c8493e891ce8b73fb6a338625b8c7590f5b6170d62ed9d45a3d27242c80f271ddbd797ef806e0aa2fff7628d7c

  • SSDEEP

    196608:DT25bSnhADMw5dlVRMKGIF9HKDoCg7DhIvuS5XsUQr7ogl1O6ZJoA3wA8jMMG9vH:RAYwVjvnh7DhaudEJAxM2

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      e0cbbcba7c23450110ba06dcbc6aa50394808a45deb217a80c4fa734f27da8d3

    • Size

      11.0MB

    • MD5

      6f1a6cf00868b87ff30337a55de3dc86

    • SHA1

      9d8a0a8f9152603758e31b1f7f14a06e22be07c7

    • SHA256

      e0cbbcba7c23450110ba06dcbc6aa50394808a45deb217a80c4fa734f27da8d3

    • SHA512

      a0f080d6828d1fbcaeb56dcdeec9265c848b91c8493e891ce8b73fb6a338625b8c7590f5b6170d62ed9d45a3d27242c80f271ddbd797ef806e0aa2fff7628d7c

    • SSDEEP

      196608:DT25bSnhADMw5dlVRMKGIF9HKDoCg7DhIvuS5XsUQr7ogl1O6ZJoA3wA8jMMG9vH:RAYwVjvnh7DhaudEJAxM2

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks