General

  • Target

    68965a99ce5793688c61a730a19ea04180646467cb4de32ce2d8ec89de2f75b7

  • Size

    6.2MB

  • Sample

    250328-lajphawms6

  • MD5

    c51f4a357fcb2251809751ccfb9e09c8

  • SHA1

    a0df50477a90bb204baca42db69642cfc4f895e3

  • SHA256

    68965a99ce5793688c61a730a19ea04180646467cb4de32ce2d8ec89de2f75b7

  • SHA512

    640e56aa7b8b0ba80bab4a63189b0775468e57dbe0087edede952f297b3e0c8bde29c705fe3db8b0f3b3a667c675e68f6fc02ea1a96a7c5c00d83cc359bf6a4d

  • SSDEEP

    98304:B64yn5WgXwNcW6NgjJF8IrUn3wSX8o+beO7FWsQwqZ1lEb76kZUb6ERVfABJRkb:B6xlxW6NgVokdbeO7FgjFEb+bdLoJRkb

Malware Config

Targets

    • Target

      68965a99ce5793688c61a730a19ea04180646467cb4de32ce2d8ec89de2f75b7

    • Size

      6.2MB

    • MD5

      c51f4a357fcb2251809751ccfb9e09c8

    • SHA1

      a0df50477a90bb204baca42db69642cfc4f895e3

    • SHA256

      68965a99ce5793688c61a730a19ea04180646467cb4de32ce2d8ec89de2f75b7

    • SHA512

      640e56aa7b8b0ba80bab4a63189b0775468e57dbe0087edede952f297b3e0c8bde29c705fe3db8b0f3b3a667c675e68f6fc02ea1a96a7c5c00d83cc359bf6a4d

    • SSDEEP

      98304:B64yn5WgXwNcW6NgjJF8IrUn3wSX8o+beO7FWsQwqZ1lEb76kZUb6ERVfABJRkb:B6xlxW6NgVokdbeO7FgjFEb+bdLoJRkb

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks